diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2011-12-27 19:50:36 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2011-12-28 22:39:19 +1100 |
| commit | cfb9a9d650a0217eaa751963f055f8cdd7aa3392 (patch) | |
| tree | 175f5ae7a93167fe3ffd6c0c87b013e96f30dbc2 /source4/auth/ntlmssp | |
| parent | e387721bc53d7caa6d8f578ada242f4c5fa78716 (diff) | |
| download | samba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.tar.gz samba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.tar.bz2 samba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.zip | |
s4-ntlmssp Do not allow LM key without a LM password
Diffstat (limited to 'source4/auth/ntlmssp')
| -rw-r--r-- | source4/auth/ntlmssp/ntlmssp_client.c | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/source4/auth/ntlmssp/ntlmssp_client.c b/source4/auth/ntlmssp/ntlmssp_client.c index 6ec56941e6..d5ece11e6a 100644 --- a/source4/auth/ntlmssp/ntlmssp_client.c +++ b/source4/auth/ntlmssp/ntlmssp_client.c @@ -229,9 +229,11 @@ NTSTATUS ntlmssp_client_challenge(struct gensec_security *gensec_security, } if (!(flags & CLI_CRED_LANMAN_AUTH)) { - /* LM Key is still possible, just silly. Fortunetly - * we require command line options to end up here */ - /* ntlmssp_state->neg_flags &= ~NTLMSSP_NEGOTIATE_LM_KEY; */ + /* LM Key is still possible, just silly, so we do not + * allow it. Fortunetly all LM crypto is off by + * default and we require command line options to end + * up here */ + ntlmssp_state->neg_flags &= ~NTLMSSP_NEGOTIATE_LM_KEY; } if (!(flags & CLI_CRED_NTLM2)) { |