diff options
| author | Stefan Metzmacher <metze@samba.org> | 2022-11-30 15:13:47 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2022-12-14 00:48:48 +0100 |
| commit | 28ac3faa51c66b005a90c527393fa7c2d43d4c31 (patch) | |
| tree | 4a91e4ba763cd3374a26dec0af6e6a06f6e76ccb | |
| parent | 93e4e50d250a85c9b0308c3f899ab00f47f427df (diff) | |
| download | samba-28ac3faa51c66b005a90c527393fa7c2d43d4c31.tar.gz | |
CVE-2022-38023 testparm: warn about server/client schannel != yes
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15240
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit f964c0c357214637f80d0089723b9b11d1b38f7e)
| -rw-r--r-- | source3/utils/testparm.c | 20 |
1 files changed, 17 insertions, 3 deletions
diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c index 58ba46bc15f..dd8acb58ff7 100644 --- a/source3/utils/testparm.c +++ b/source3/utils/testparm.c @@ -598,11 +598,25 @@ static int do_global_checks(void) ret = 1; } - if (!lp_server_schannel()) { + if (lp_server_schannel() != true) { /* can be 'auto' */ fprintf(stderr, - "WARNING: You have configured 'server schannel = no'. " + "WARNING: You have not configured " + "'server schannel = yes' (the default). " "Your server is vulernable to \"ZeroLogon\" " - "(CVE-2020-1472)\n\n"); + "(CVE-2020-1472)\n" + "If required use individual " + "'server require schannel:COMPUTERACCOUNT$ = no' " + "options\n\n"); + } + if (lp_client_schannel() != true) { /* can be 'auto' */ + fprintf(stderr, + "WARNING: You have not configured " + "'client schannel = yes' (the default). " + "Your server is vulernable to \"ZeroLogon\" " + "(CVE-2020-1472)\n" + "If required use individual " + "'client schannel:NETBIOSDOMAIN = no' " + "options\n\n"); } return ret; |