[Freeipa-users] Re: PacRequestorEnforcement and CVE-2021-42287, any concern?

2022-03-21 Thread Amos via FreeIPA-users
On Mon, Mar 21, 2022 at 12:44 PM Alexander Bokovoy wrote: > On ma, 21 maalis 2022, Amos via FreeIPA-users wrote: > > >https://access.redhat.com/solutions/6633491 which isn't very encouraging. > > This one is unrelated. RHEL 8.4+ should have enough fixes. > > Do you see any particular problems? >

[Freeipa-users] Re: PacRequestorEnforcement and CVE-2021-42287, any concern?

2022-03-21 Thread Alexander Bokovoy via FreeIPA-users
On ma, 21 maalis 2022, Amos via FreeIPA-users wrote: Hi. I'm trying to find out if the changes to PacRequestorEnforcement in order to remedy CVE-2021-42287 will have an impact on IPA servers/clients. Our IPA servers are in a one-way trust with AD. All user accounts are in AD. I've tried to loo

[Freeipa-users] PacRequestorEnforcement and CVE-2021-42287, any concern?

2022-03-21 Thread Amos via FreeIPA-users
Hi. I'm trying to find out if the changes to PacRequestorEnforcement in order to remedy CVE-2021-42287 will have an impact on IPA servers/clients. Our IPA servers are in a one-way trust with AD. All user accounts are in AD. I've tried to lookup anything related to this, but not finding much. Wh