Skip to Main Content

Infrastructure Software

Announcement

Testing banner

CVE-2020-1472 (Microsoft changes in Netlogon secure) Has Solaris smb has a fix

Andrew WatkinsOct 27 2020

Hello,
The above CVE is not a Solaris security problem, but my understanding after February 2021 the default security in Windows Server will mean that smb on Solaris will not be able to connect to a Domain Controller. This option can be turned off in DC, but I just wonder is it being worked on. (Ref: for CVE-2020-1472 https://go.microsoft.com/fwlink/?linkid=2133485 )
For example our DC is warning me that this could be a problem in the future.

The Netlogon service allowed a vulnerable Netlogon secure channel connection.  

Warning: This connection will be denied once the enforcement phase is released. To better understand the enforcement phase,  please visit  https://go.microsoft.com/fwlink/?linkid=2133485.  

 Machine SamAccountName: FILESRV 
 Domain: dcs.bbk.ac.uk.
------

I know Samba already had this working but I just wonder any news of Solaris SMB service.
Again this isn't a Security problem for Solaris just the Microsoft FIX will effect Solaris.
Thanks.
Andrew
(My first post under new website which I really hate, since I can find this discussion)

Comments
Post Details
Added on Oct 27 2020
13 comments
943 views