[PATCH] Re: netlogon_creds_cli_validate() in master4-schannel

Andrew Bartlett abartlet at samba.org
Tue Dec 10 15:40:20 MST 2013


On Wed, 2013-12-11 at 06:42 +1300, Andrew Bartlett wrote:

> > I've updated my
> > https://git.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master4-schannel-ok
> > 
> > I now require NETLOGON_NEG_PASSWORD_SET2 with require_strong_key.
> > and we also require NETLOGON_NEG_ARCFOUR unless we don't propose
> > NETLOGON_NEG_AUTHENTICATED_RPC.
> > 
> > I've also added "allow nt4 crypto" (default: no) and "reject md5
> > clients" (default: no)
> > as options for the AD netlogon server.
> 
> I'll look over the changes today, and hopefully be able to give you my
> review.  Do you want me to push if it's all OK?

I've reviewed these, and pushed with my review tags to
http://git.samba.org/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/metze-master4-schannel-ok

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba






More information about the samba-technical mailing list