diff options
| author | Joseph Sutton <josephsutton@catalyst.net.nz> | 2022-11-15 18:14:36 +1300 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2022-12-13 13:07:29 +0000 |
| commit | d861d4eb28bd4c091955c11669edcf867b093a6f (patch) | |
| tree | 7e7e8732285919bf75ab7b436bd96b4c6d71dfa1 /source3/param | |
| parent | a50a2be622afaa7a280312ea12f5eb9c9a0c41da (diff) | |
| download | samba-d861d4eb28bd4c091955c11669edcf867b093a6f.tar.gz | |
CVE-2022-37966 param: Add support for new option "kdc default domain supportedenctypes"
This matches the Windows registry key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\services\KDC\DefaultDomainSupportedEncTypes
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15237
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source3/param')
| -rw-r--r-- | source3/param/loadparm.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c index a0c9249b777..27a77c71f5e 100644 --- a/source3/param/loadparm.c +++ b/source3/param/loadparm.c @@ -993,6 +993,9 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals) */ Globals.rpc_start_on_demand_helpers = true; + Globals.kdc_default_domain_supported_enctypes = + KERB_ENCTYPE_RC4_HMAC_MD5 | KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96_SK; + /* Now put back the settings that were set with lp_set_cmdline() */ apply_lp_set_cmdline(); } |