Search results

Fedora, openSUSE, Red Hat Enterprise Linux, SUSE Linux Enterpise, as well as many other GNU/Linux distributions use MIT Kerberos as their system-wide

=== Improve libcli/dns === ...ons is required and can be used to cross-check and complement the existing DNS server tests already shipped by Samba. This testsuite should use cmocka.

...ind a directory <code>/etc/ctdb</code>. Inside tis directory you need some configuration files for CTDB. |Basic configuration

==January 2020 Linux.conf.au == ==January 2019 Linux.conf.au Christchurch==

...figuration CTDB and Samba. For the parts covering CTDB and Samba specific configuration please follow the various sections under [[CTDB and Clustered Samba]]. ...e GPFS with alternate clustered file system or use a variation of my Samba configuration below. This setup has been tested in a non production environment. Deployin

...finddcs() fails to find DC when there is only an AAAA record for the DC in DNS. ...to provide services like SRVSVC in the same way that smbd used to in this configuration.

...s attacker can crash the Samba AD DC LDAP server by sending easily crafted DNs as part of a bind request. More serious heap corruption is likely also poss ...0.html CVE-2020-27840]: Fix unauthenticated remote heap corruption via bad DNs.

...ck for the strings "streams_depot" or "streams_xattr" inside your smb.conf configuration file. :* [https://bugzilla.samba.org/show_bug.cgi?id=10064 bug #910064]: Linux kernel oplock breaks can miss signals.

:* BUG 9402: Fix dns updates against BIND9 (used in a Samba4 domain). ...duced a bad security flaw on Linux platforms if the binaries were built on Linux platforms with libcap support. The flaw caused all smbd processes to inheri

* DNS Domain Name: greatlakes.example.com * DNS Backend: Internal

...20-14383.html CVE-2020-14383]: An authenticated user can crash the DCE/RPC DNS with easily crafted records. ...ated non-admin attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.

...bin/cvename.cgi?name=CVE-2019-19344 CVE-2019-19344]: Use after free during DNS zone scavenging in Samba AD DC. :During DNS zone scavenging (of expired dynamic entries) there is a read of memory afte

...finddcs() fails to find DC when there is only an AAAA record for the DC in DNS. ...dirnames is reduced to 2 syscalls (openat, close) per component. On modern Linux kernels (>= 5.6) smbd makes use of the openat2() syscall with SOLVE_NO_SYML

...g.cgi?id=13848 BUG #13848]: s3:waf: Fix the detection of makdev() macro on Linux. :* [https://bugzilla.samba.org/show_bug.cgi?id=13738 BUG #13738]: dns: Changing onelevel search for wildcard to subtree.

...g/show_bug.cgi?id=12737 BUG #12737]: vfs_acl_xattr - failure to get ACL on Linux if memory is fragmented. ..., all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.

...e server only are not directly affected by this flaw, though they may need configuration changes to continue to talk to domain controllers (see "file servers and do ...curity/CVE-2020-10745.html CVE-2020-10745]: Parsing and packing of NBT and DNS packets can consume excessive CPU

...ugzilla.samba.org/show_bug.cgi?id=9299 BUG #9299]: nsswitch: Fix soname of linux nss_*.so.2 modules. ...ttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0239 CVE-2014-0239]: dns: Don't reply to replies (bug #10609).

Samba is the standard Windows interoperability suite of programs for Linux and Unix. ...ial to the operation of a Windows network and provides support for them on Linux, Unix, and Mac OS systems. This allows the clients and servers in a network

..., all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation. ...//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2123 CVE-2016-2123]: Fix DNS vuln ZDI-CAN-3995.

...how_bug.cgi?id=12737 BUG #12737]: vfs_acl_xattr: Fix failure to get ACL on Linux if memory is fragmented. ...n. We implemented checks in the 'testparm' tool to validate the ID mapping configuration. You should run it and check if it prints any warnings or errors after upgr