Search results

...Controller or man-in-the-middle attacker impersonating an Active Directory Domain Controller could achieve root-level access by compromising the winbindd pro ...specify a list of SIDs or groups for which an authenticated user must be a member of. If an authenticated user does not belong to any of the entries, then lo

...ion. This means the target server, which must be in the current or trusted domain/realm, is given a valid general purpose Kerberos "Ticket Granting Ticket" ( ...talking to domain controllers as a member server, and trusted domains as a domain controller. These DCE/RPC connections were intended to protected by the co

...show_bug.cgi?id=13206 BUG #13206]: Fix authentication with an empty string domain ''. ...ug.cgi?id=13052 BUG #13052]: winbindd: Fix idmap_rid dependency on trusted domain list.

* An Active Directory Domain Controller, which provides directory-based network authentication (as well ...that allows it to integrate with other network servers within a particular domain.

...illa.samba.org/show_bug.cgi?id=11059 BUG #11059]: libsmb: Provide authinfo domain for encrypted session referrals. ...e=CVE-2014-8143 CVE-2014-8143] (Elevation of privilege to Active Directory Domain Controller).

::A user in a Samba AD domain can crash the KDC when Samba is built in the non-default MIT Kerberos confi :* [https://bugzilla.samba.org/show_bug.cgi?id=13308 BUG #13308]: samba-tool domain trust: Fix trust compatibility to Windows Server 1709 and FreeIPA.

...talking to domain controllers as a member server, and trusted domains as a domain controller. These DCE/RPC connections were intended to protected by the co ...ugzilla.samba.org/show_bug.cgi?id=11643 BUG #11643]: docs: Add example for domain logins to smbspool man page.

...nd so absent a 'full-sync' replication, ACLs could get out of sync between domain controllers. ...gzilla.samba.org/show_bug.cgi?id=14091 BUG #14091]: lookup_name: Allow own domain lookup when flags == 0.

...attack impersonating a trusted server, who may gain elevated access to the domain by returning malicious replication or authorization data. :* [https://bugzilla.samba.org/show_bug.cgi?id=12727 BUG #12727]: Lookup-domain for well-known SIDs on a DC.

...imes operated in a domain with a mix of Samba and Windows Active Directory Domain Controllers. ...Samba from 4.0.0 to 4.3.2 inclusive, when deployed as an AD DC in the same domain with Windows DCs, could be used to override the protection against the MS15

...n obvious extension to also offer this batch operation on the winbind unix domain stream socket that is available to local processes on the Samba server. ...org/cgi-bin/cvename.cgi?name=CVE-2020-1472 CVE-2020-1472]: Unauthenticated domain takeover via netlogon ("ZeroLogon").