diff options
author | Andrew Bartlett <abartlet@samba.org> | 2022-02-10 18:15:58 +1300 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2022-03-17 01:57:38 +0000 |
commit | 2dbc8b98435bd2dde93830a0aaa07053eda75bc6 (patch) | |
tree | 2f6d012635a4d88274439c42d8b30890594eecd9 /source4/auth/ntlm | |
parent | 09eaf7403e8cfdb227ffc3fc1610fbd0dc0bf893 (diff) | |
download | samba-2dbc8b98435bd2dde93830a0aaa07053eda75bc6.tar.gz |
s4-auth: Disable LM authenticaton in the AD DC despite "lanman auth = yes"
LM authentication is very weak and a very bad idea, so has been deprecated since
Samba 4.11.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/auth/ntlm')
-rw-r--r-- | source4/auth/ntlm/auth_sam.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/source4/auth/ntlm/auth_sam.c b/source4/auth/ntlm/auth_sam.c index cf0656ae0da..0625c4f1268 100644 --- a/source4/auth/ntlm/auth_sam.c +++ b/source4/auth/ntlm/auth_sam.c @@ -90,8 +90,8 @@ static NTSTATUS authsam_password_ok(struct auth4_context *auth_context, case AUTH_PASSWORD_RESPONSE: status = ntlm_password_check(mem_ctx, - lpcfg_lanman_auth(auth_context->lp_ctx), - lpcfg_ntlm_auth(auth_context->lp_ctx), + false, + lpcfg_ntlm_auth(auth_context->lp_ctx), user_info->logon_parameters, &auth_context->challenge.data, &user_info->password.response.lanman, |