summaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2016-03-10 17:03:59 +0100
committerStefan Metzmacher <metze@samba.org>2016-04-12 19:25:27 +0200
commit06b038c017234f1eae35f4c316a0d105cc4d1061 (patch)
tree4f7a4d969bbddbb383fb2acef03a13dec7b2c1ee /lib
parent9085300e90fd06242ca03e426c09b01ed610c45a (diff)
downloadsamba-06b038c017234f1eae35f4c316a0d105cc4d1061.tar.gz
CVE-2016-2118: docs-xml: add "allow dcerpc auth level connect" defaulting to "yes"
We sadly need to allow this for now by default. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'lib')
-rw-r--r--lib/param/loadparm.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index f6a7cfefdff..c47759d94c7 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2634,6 +2634,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
lpcfg_do_global_parameter(lp_ctx, "RawNTLMv2Auth", "False");
lpcfg_do_global_parameter(lp_ctx, "client use spnego principal", "False");
+ lpcfg_do_global_parameter(lp_ctx, "allow dcerpc auth level connect", "True");
+
lpcfg_do_global_parameter(lp_ctx, "UnixExtensions", "True");
lpcfg_do_global_parameter(lp_ctx, "PreferredMaster", "Auto");