[OpenIndiana-discuss] First rpc sealing deadline is today, action required

Guenther Alka gea at napp-it.org
Tue Jun 13 15:37:03 UTC 2023


Microsoft has fixed a serious security problem with rpc signing and 
enforces all to follow the switch to rpc sealing.
Today is the first deadline for rpc signing.

/*Important*// Starting June 2023, Enforcement mode will be enabled on 
all Windows domain controllers and will block vulnerable connections 
from non-compliant devices. At that time, you will not be able to 
disable the update, but may move back to the Compatibility mode setting. 
Compatibility mode will be removed in July 2023, as outlined in the 
//Timing of updates to address Netlogon vulnerability CVE-2022-38023 
<https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25#timing5021130>// section./ 


https://support.microsoft.com/en-us/topic/kb5021130-how-to-manage-the-netlogon-protocol-changes-related-to-cve-2022-38023-46ea3067-3989-4d40-963c-680fd9e8ee25

Clients that want to access a Windows server or users authenticate 
against an AD server like OpenIndiana as an AD member will no longer 
work unless you update or change Windows registry settings that allows 
using signing up to the final deadline july, 11.

The Illumos fix is ready,
https://www.illumos.org/issues/15670

A pkg update should be enough on install newest Illumos on OI with the fix.

thanks for providing the fix

Gea

*illumos <https://illumos.topicbox.com/latest>* / omnios-discuss / see 
discussions <https://illumos.topicbox.com/groups/omnios-discuss> + 
participants 
<https://illumos.topicbox.com/groups/omnios-discuss/members> + 
delivery options 
<https://illumos.topicbox.com/groups/omnios-discuss/subscription> 
Permalink 
<https://illumos.topicbox.com/groups/omnios-discuss/Tbc9b3ff7ee0020b6-M2d68e616e5692ba4a8475cc4> 


More information about the openindiana-discuss mailing list