New attack on Active Directory

[Simo]

On Wed, 2018-01-31 at 10:18 -0800, Jeremy Allison via samba-technical
wrote:
> On Wed, Jan 31, 2018 at 08:54:52AM -0500, Simo via samba-technical wrote:
> > On Tue, 2018-01-30 at 09:36 -0800, Jeremy Allison via samba-technical
> > wrote:
> > > https://blog.alsid.eu/dcshadow-explained-4510f52fc19d
> > > 
> > > I'm still reading, but thought people on this list
> > > might want to get familiar with it.
> > > 
> > > Don't know if it affects Samba yet.
> > 
> > It gets old fast when people mark as "attack" what is clearly not, sad!
> 
> Yep, realized that once I'd finished going through it.
> Already updated the list with that info.
> 
> TL;DR "Compromised server is compromised" :-).

Good summary :)

Simo.