[Samba] Microsoft Patch MS14-068 and Samba

[Andrew Bartlett]

On Tue, 2014-11-25 at 05:39 +0800, John Blac wrote:
> Hi Everyone,
> 
> Will Samba be affected in this patch was applied to an AD server it is
> connected to?
> 
> https://technet.microsoft.com/en-us/library/security/ms14-068.aspx

No, this won't impact Samba in any way.  Thankfully the vulnerability
was beyond the expected scope of the protocol, rather than a legitimate
part of the protocol being found insecure.  

Samba would always have rejected such a PAC in any case. 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba