New attack on Active Directory
jra at samba.org
Wed Jan 31 18:18:19 UTC 2018
On Wed, Jan 31, 2018 at 08:54:52AM -0500, Simo via samba-technical wrote:
> On Tue, 2018-01-30 at 09:36 -0800, Jeremy Allison via samba-technical
> > https://blog.alsid.eu/dcshadow-explained-4510f52fc19d
> > I'm still reading, but thought people on this list
> > might want to get familiar with it.
> > Don't know if it affects Samba yet.
> It gets old fast when people mark as "attack" what is clearly not, sad!
Yep, realized that once I'd finished going through it.
Already updated the list with that info.
TL;DR "Compromised server is compromised" :-).
More information about the samba-technical