summaryrefslogtreecommitdiff
path: root/source4/auth/ntlmssp
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2011-12-27 19:50:36 +1100
committerAndrew Bartlett <abartlet@samba.org>2011-12-28 22:39:19 +1100
commitcfb9a9d650a0217eaa751963f055f8cdd7aa3392 (patch)
tree175f5ae7a93167fe3ffd6c0c87b013e96f30dbc2 /source4/auth/ntlmssp
parente387721bc53d7caa6d8f578ada242f4c5fa78716 (diff)
downloadsamba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.tar.gz
samba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.tar.bz2
samba-cfb9a9d650a0217eaa751963f055f8cdd7aa3392.zip
s4-ntlmssp Do not allow LM key without a LM password
Diffstat (limited to 'source4/auth/ntlmssp')
-rw-r--r--source4/auth/ntlmssp/ntlmssp_client.c8
1 files changed, 5 insertions, 3 deletions
diff --git a/source4/auth/ntlmssp/ntlmssp_client.c b/source4/auth/ntlmssp/ntlmssp_client.c
index 6ec56941e6..d5ece11e6a 100644
--- a/source4/auth/ntlmssp/ntlmssp_client.c
+++ b/source4/auth/ntlmssp/ntlmssp_client.c
@@ -229,9 +229,11 @@ NTSTATUS ntlmssp_client_challenge(struct gensec_security *gensec_security,
}
if (!(flags & CLI_CRED_LANMAN_AUTH)) {
- /* LM Key is still possible, just silly. Fortunetly
- * we require command line options to end up here */
- /* ntlmssp_state->neg_flags &= ~NTLMSSP_NEGOTIATE_LM_KEY; */
+ /* LM Key is still possible, just silly, so we do not
+ * allow it. Fortunetly all LM crypto is off by
+ * default and we require command line options to end
+ * up here */
+ ntlmssp_state->neg_flags &= ~NTLMSSP_NEGOTIATE_LM_KEY;
}
if (!(flags & CLI_CRED_NTLM2)) {