Question:
What are Centrify's recommendations in regards to Samba security alert - CVE-2017-7494 (SambaCry)?
Answer:
With regards to CVE-2017-7494, Centrify is no longer shipping Samba, only the adbindproxy package to interoperate Centrify with Samba. Please follow Samba's recommendations for this security alert.
Here are the latest release notes for adbindproxy. Specifically, it highlights our recommendation with regards to Samba:
Centrify ADBindProxy is a proxy agent package that seamlessly integrates the DirectControl agent in Centrify Server Suite with open source Samba (referred to as stock Samba in this document), enabling the two products to share Active Directory user and group membership and to agree upon Unix identity attributes for Active Directory users. It is a proxy that passes identity management requests from Samba to DirectControl.
This Centrify ADBindProxy release supports stock Samba version 4.x. You are strongly advised to apply the latest security patches from Samba first before deploying Centrify ADBindProxy.
Regards,