Opanga projekiti ya Samba ogwiritsa kuti posachedwapa Zowopsa za Windows ZeroLogin () komanso pakukhazikitsa woyang'anira dera la Samba. Kusatetezeka zolakwika mu protocol ya MS-NRPC ndi AES-CFB8 cryptographic algorithm, ndipo ngati itagwiritsidwa ntchito bwino, imalola wowukira kuti apeze mwayi wowongolera pawowongolera adalamulira.
Zomwe zili pachiwopsezo ndikuti protocol ya MS-NRPC (Netlogon Remote Protocol) imakulolani kuti mubwererenso kugwiritsa ntchito kulumikizana kwa RPC popanda kubisa posinthana data yotsimikizira. Wowukira amatha kugwiritsa ntchito cholakwika mu algorithm ya AES-CFB8 kuti awononge kulowa bwino. Pafupifupi, zimatengera kuyesa kwa 256 spoofing kuti mulowe ngati woyang'anira. Kuti muchite chiwembu, simuyenera kukhala ndi akaunti yogwira ntchito pawolamulira wamba; kuyesa kwa spoofing kumatha kupangidwa pogwiritsa ntchito mawu achinsinsi olakwika. Pempho lovomerezeka la NTLM lidzatumizidwa kwa woyang'anira dera, lomwe lidzabwezera kukana, koma wowukirayo akhoza kusokoneza yankho ili, ndipo dongosolo lowukiridwa lidzawona kuti kulowetsako kunali kopambana.
Ku Samba, kusatetezeka kumangowoneka pamakina omwe sagwiritsa ntchito "seva schannel = inde", yomwe ndi yosasinthika kuyambira Samba 4.8. Makamaka, machitidwe omwe ali ndi "server schannel = no" ndi "server schannel = auto" akhoza kusokonezedwa, zomwe zimalola Samba kugwiritsa ntchito zolakwika zomwezo mu AES-CFB8 algorithm monga Windows.
Mukamagwiritsa ntchito cholozera chokonzekera Windows , mu Samba kokha kuyitanira ku ServerAuthenticate3 kumagwira ntchito, ndipo ntchito ya ServerPasswordSet2 imalephera (kugwiritsa ntchito kumafuna kusintha kwa Samba). Za magwiridwe antchito amtundu wina (, , , ) palibe chomwe chikunenedwa. Mutha kutsata zowukira pamakina posanthula kupezeka kwa zolemba zomwe zikutchula ServerAuthenticate3 ndi ServerPasswordSet mu zolemba zowerengera za Samba.
Source: opennet.ru