debian configuration adds the macros MAIN_KEEP_ENVIRONMENT and
MAIN_ADD_ENVIRONMENT to easily set these options.
-- Andreas Metzler <ametzler@debian.org> Sat, 12 Mar 2016 08:17:40 +0100
samba (2:4.2.10+dfsg-0+deb8u1) jessie-security; urgency=high
This Samba security release moves Samba from Samba 4.1 to 4.2 in
Debian jessie. This addresses both Denial of Service and Man in
the Middle vulnerabilities.
This change was required as the scale of the patches did not
permit a backport to Samba 4.1.
Both of these changes implement a number of stricter behaviours
to prevent Man in the Middle attacks on our network services, as a
client and as a server.
Between these changes, compatibility with a large number of older
software versions has been lost in the default configuration.
As an AD DC server, only Windows 2000 and Samba 3.6 and above as a
domain member is supported out-of-the box.
Specifically compatibility with the sssd client depends on the
options selected (the ad or krb5 identity providers should work).
Also as an AD DC, use of ldaps:// from ldbsearch or OpenLDAP's
ldapsearch is not compatible with NTLMSSP or Kerberos, it is now
only useful for simple binds. This applies unless the 'ldap
server require strong auth' option is modified to a less secure
setting of 'allow_sasl_over_tls'. Instead, use ldap:// and allow
NTLMSSP/Kerberos to provide the sign/seal protection (on by
default for Samba clients, and required by the server in this release).
Debian
Debian-France
Debian-Facile
Debian-fr.org
Forum-Debian.fr
Debian ?
Communautés
