Bug 6109 - Function needs to return "status not implemented"
Summary: Function needs to return "status not implemented"
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: Other (show other bugs)
Version: unspecified
Hardware: Other Windows NT
: P3 normal (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: Andrew Bartlett
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-12 14:53 UTC by Nick Meier
Modified: 2009-02-25 03:28 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nick Meier 2009-02-12 14:53:44 UTC
This is the Samba 4 version of bug 6100
    Microsoft Open Protocol Document MS-NRPC
        NetrLogonDummyRoutine1, section 3.5.4.9.5.
    For win7 this is renamed NetrLogonGetCapabilities –  opnum 21,
    see section 3.5.4.3.10  
    - Function call to test for a man-in-the-middle attack,
      this was first implemented in win2k.
    - If Samba supported the end-point, but not the method,
      and returned “status not implemented”, then the response
      is secure and we would downgrade to prior behavior.
    In short, Samba needs to be returning STATUS_NOT_IMPLEMENTED
    rather than returning an unauthenticated RPC layer error.
Comment 1 Stefan Metzmacher 2009-02-16 04:44:26 UTC
Should be fixed with commit 94abbead1b76e7aafee8c59233b096a3f03b35c8
Comment 2 Matthias Dieter Wallnöfer 2009-02-25 03:28:06 UTC
Ok, then mark it as "FIXED".