New attack on Active Directory

[Jeremy Allison]

On Wed, Jan 31, 2018 at 08:54:52AM -0500, Simo via samba-technical wrote:
> On Tue, 2018-01-30 at 09:36 -0800, Jeremy Allison via samba-technical
> wrote:
> > https://blog.alsid.eu/dcshadow-explained-4510f52fc19d
> > 
> > I'm still reading, but thought people on this list
> > might want to get familiar with it.
> > 
> > Don't know if it affects Samba yet.
> 
> It gets old fast when people mark as "attack" what is clearly not, sad!

Yep, realized that once I'd finished going through it.
Already updated the list with that info.

TL;DR "Compromised server is compromised" :-).