diff options
| author | Jelmer Vernooij <jelmer@samba.org> | 2008-10-31 15:07:34 +0100 |
|---|---|---|
| committer | Jelmer Vernooij <jelmer@samba.org> | 2008-10-31 15:07:34 +0100 |
| commit | 069a6f0e4b59bb76191fa4011adf8d97cfd69011 (patch) | |
| tree | 7add7338ad534ece45592d8b6b6edb889fee9cf8 | |
| parent | 7f8bc6a2d904bd5b5c056ec96a68ee928659324a (diff) | |
| download | samba-069a6f0e4b59bb76191fa4011adf8d97cfd69011.tar.gz samba-069a6f0e4b59bb76191fa4011adf8d97cfd69011.tar.bz2 samba-069a6f0e4b59bb76191fa4011adf8d97cfd69011.zip | |
Disable lanman authentication by default in Samba 4.
| -rwxr-xr-x | selftest/selftest.pl | 1 | ||||
| -rw-r--r-- | selftest/target/Samba4.pm | 1 | ||||
| -rw-r--r-- | source4/param/loadparm.c | 4 |
3 files changed, 4 insertions, 2 deletions
diff --git a/selftest/selftest.pl b/selftest/selftest.pl index aa99b2ed6f..292a2d2dd6 100755 --- a/selftest/selftest.pl +++ b/selftest/selftest.pl @@ -578,6 +578,7 @@ sub write_clientconf($$) notify:inotify = false ldb:nosync = true system:anonymous = true + client lanman auth = Yes torture:basedir = $prefix_abs/client #We don't want to pass our self-tests if the PAC code is wrong gensec:require_pac = true diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm index 8c79a31448..5cc34c76fd 100644 --- a/selftest/target/Samba4.pm +++ b/selftest/target/Samba4.pm @@ -572,6 +572,7 @@ sub provision($$$$$$) #We don't want to pass our self-tests if the PAC code is wrong gensec:require_pac = true log level = $server_loglevel + lanman auth = Yes [tmp] path = $tmpdir diff --git a/source4/param/loadparm.c b/source4/param/loadparm.c index a019c951de..18b3dcf75d 100644 --- a/source4/param/loadparm.c +++ b/source4/param/loadparm.c @@ -2361,8 +2361,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx) lp_do_global_parameter(lp_ctx, "TimeServer", "False"); lp_do_global_parameter(lp_ctx, "BindInterfacesOnly", "False"); lp_do_global_parameter(lp_ctx, "Unicode", "True"); - lp_do_global_parameter(lp_ctx, "ClientLanManAuth", "True"); - lp_do_global_parameter(lp_ctx, "LanmanAuth", "True"); + lp_do_global_parameter(lp_ctx, "ClientLanManAuth", "False"); + lp_do_global_parameter(lp_ctx, "LanmanAuth", "False"); lp_do_global_parameter(lp_ctx, "NTLMAuth", "True"); lp_do_global_parameter(lp_ctx, "client use spnego principal", "False"); |