]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the default
authorStefan Metzmacher <metze@samba.org>
Wed, 30 Nov 2022 08:05:51 +0000 (09:05 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 14 Dec 2022 10:28:17 +0000 (10:28 +0000)
commitbe57176c3abd01635859e3d3195c3afc091610db
treedbd91e79010ed9e136f7cb3b34853842338a4324
parente7d3998bcc8dd4bae40ce5c5854d8c1a39c92809
CVE-2022-37966 param: let "kdc default domain supportedenctypes = 0" mean the default

In order to allow better upgrades we need the default value for smb.conf to the
same even if the effective default value of the software changes in future.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit fa64f8fa8d92167ed15d1109af65bbb4daab4bad)
docs-xml/smbdotconf/security/kdcdefaultdomainsupportedenctypes.xml
lib/param/loadparm.c
python/samba/tests/krb5/etype_tests.py
python/samba/tests/krb5/kdc_base_test.py
source3/param/loadparm.c
source4/kdc/db-glue.c