diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2014-09-05 17:38:38 +1200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2014-09-30 12:32:05 +0200 |
| commit | afe02d12f444ad9a6abf31a61f578320520263a9 (patch) | |
| tree | 8826e55ffd9d93a8cde8db09679e9d147bee497a /lib/param/loadparm.c | |
| parent | e2cd3257141bd4a88cda1fff5bde9df60b253a97 (diff) | |
| download | samba-afe02d12f444ad9a6abf31a61f578320520263a9.tar.gz | |
winbindd: Change value of "ldap sasl wrapping" to sign
This is to disrupt MITM attacks between us and our DC
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'lib/param/loadparm.c')
| -rw-r--r-- | lib/param/loadparm.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c index 7b86a1eeb6d..9953053569a 100644 --- a/lib/param/loadparm.c +++ b/lib/param/loadparm.c @@ -2665,6 +2665,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx) lpcfg_do_global_parameter(lp_ctx, "ldap debug threshold", "10"); + lpcfg_do_global_parameter(lp_ctx, "client ldap sasl wrapping", "sign"); + lpcfg_do_global_parameter(lp_ctx, "follow symlinks", "yes"); lpcfg_do_global_parameter(lp_ctx, "machine password timeout", "604800"); |