diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2017-07-03 11:28:06 +1200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2017-07-04 06:57:20 +0200 |
| commit | e23e8d9ff9144dabea8738c9ab28862c5996c9a8 (patch) | |
| tree | e6b9f084fde320ced184e8213a2989b91ff3e650 /selftest | |
| parent | e13b21d9644445636a7657c73f501772ac8d96bf (diff) | |
| download | samba-e23e8d9ff9144dabea8738c9ab28862c5996c9a8.tar.gz | |
s3-rpc_server: Disable the NETLOGON server by default
The NETLOGON server is only needed when the classic/NT4 DC is enabled
and has been the source of security issues in the past. Therefore
reduce the attack surface.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
Diffstat (limited to 'selftest')
| -rw-r--r-- | selftest/knownfail | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/selftest/knownfail b/selftest/knownfail index b47a9ceae2c..fe51ec2ae21 100644 --- a/selftest/knownfail +++ b/selftest/knownfail @@ -336,3 +336,7 @@ # We currently don't send referrals for LDAP modify of non-replicated attrs ^samba4.ldap.rodc.python\(rodc\).__main__.RodcTests.test_modify_nonreplicated.* ^samba4.ldap.rodc_rwdc.python.*.__main__.RodcRwdcTests.test_change_password_reveal_on_demand_kerberos +# NETLOGON is disabled in any non-DC environments +^samba.tests.netlogonsvc.python\(ad_member\) +^samba.tests.netlogonsvc.python\(simpleserver\) +^samba.tests.netlogonsvc.python\(fileserver\) |