summaryrefslogtreecommitdiff
path: root/source3/param/loadparm.c
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2016-03-10 17:03:59 +0100
committerStefan Metzmacher <metze@samba.org>2016-04-12 19:25:27 +0200
commit06b038c017234f1eae35f4c316a0d105cc4d1061 (patch)
tree4f7a4d969bbddbb383fb2acef03a13dec7b2c1ee /source3/param/loadparm.c
parent9085300e90fd06242ca03e426c09b01ed610c45a (diff)
downloadsamba-06b038c017234f1eae35f4c316a0d105cc4d1061.tar.gz
CVE-2016-2118: docs-xml: add "allow dcerpc auth level connect" defaulting to "yes"
We sadly need to allow this for now by default. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11616 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'source3/param/loadparm.c')
-rw-r--r--source3/param/loadparm.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 47d2a929834..2af0f310ee9 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -697,6 +697,8 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
Globals.client_ntlmv2_auth = true; /* Client should always use use NTLMv2, as we can't tell that the server supports it, but most modern servers do */
/* Note, that we will also use NTLM2 session security (which is different), if it is available */
+ Globals.allow_dcerpc_auth_level_connect = true; /* we need to allow this for now by default */
+
Globals.map_to_guest = 0; /* By Default, "Never" */
Globals.oplock_break_wait_time = 0; /* By Default, 0 msecs. */
Globals.enhanced_browsing = true;