New attack on Active Directory
simo at samba.org
Wed Jan 31 18:42:13 UTC 2018
On Wed, 2018-01-31 at 10:18 -0800, Jeremy Allison via samba-technical
> On Wed, Jan 31, 2018 at 08:54:52AM -0500, Simo via samba-technical wrote:
> > On Tue, 2018-01-30 at 09:36 -0800, Jeremy Allison via samba-technical
> > wrote:
> > > https://blog.alsid.eu/dcshadow-explained-4510f52fc19d
> > >
> > > I'm still reading, but thought people on this list
> > > might want to get familiar with it.
> > >
> > > Don't know if it affects Samba yet.
> > It gets old fast when people mark as "attack" what is clearly not, sad!
> Yep, realized that once I'd finished going through it.
> Already updated the list with that info.
> TL;DR "Compromised server is compromised" :-).
Good summary :)
More information about the samba-technical