diff options
| author | Stefan Metzmacher <metze@samba.org> | 2022-11-30 15:13:47 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2022-12-13 13:07:29 +0000 |
| commit | f964c0c357214637f80d0089723b9b11d1b38f7e (patch) | |
| tree | 8d3b424251e4acd172ff8bd65fc5bcfd33e2322a | |
| parent | b3ed90a0541a271a7c6d4bee1201fa47adc3c0c1 (diff) | |
| download | samba-f964c0c357214637f80d0089723b9b11d1b38f7e.tar.gz | |
CVE-2022-38023 testparm: warn about server/client schannel != yes
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15260
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
| -rw-r--r-- | source3/utils/testparm.c | 20 |
1 files changed, 17 insertions, 3 deletions
diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c index e0455b9d7b6..7e913a8ac4d 100644 --- a/source3/utils/testparm.c +++ b/source3/utils/testparm.c @@ -598,11 +598,25 @@ static int do_global_checks(void) ret = 1; } - if (!lp_server_schannel()) { + if (lp_server_schannel() != true) { /* can be 'auto' */ fprintf(stderr, - "WARNING: You have configured 'server schannel = no'. " + "WARNING: You have not configured " + "'server schannel = yes' (the default). " "Your server is vulernable to \"ZeroLogon\" " - "(CVE-2020-1472)\n\n"); + "(CVE-2020-1472)\n" + "If required use individual " + "'server require schannel:COMPUTERACCOUNT$ = no' " + "options\n\n"); + } + if (lp_client_schannel() != true) { /* can be 'auto' */ + fprintf(stderr, + "WARNING: You have not configured " + "'client schannel = yes' (the default). " + "Your server is vulernable to \"ZeroLogon\" " + "(CVE-2020-1472)\n" + "If required use individual " + "'client schannel:NETBIOSDOMAIN = no' " + "options\n\n"); } return ret; |