summaryrefslogtreecommitdiff
path: root/source4/auth/ntlm
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2022-02-10 18:15:58 +1300
committerAndrew Bartlett <abartlet@samba.org>2022-03-17 01:57:38 +0000
commit2dbc8b98435bd2dde93830a0aaa07053eda75bc6 (patch)
tree2f6d012635a4d88274439c42d8b30890594eecd9 /source4/auth/ntlm
parent09eaf7403e8cfdb227ffc3fc1610fbd0dc0bf893 (diff)
downloadsamba-2dbc8b98435bd2dde93830a0aaa07053eda75bc6.tar.gz
s4-auth: Disable LM authenticaton in the AD DC despite "lanman auth = yes"
LM authentication is very weak and a very bad idea, so has been deprecated since Samba 4.11. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/auth/ntlm')
-rw-r--r--source4/auth/ntlm/auth_sam.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/source4/auth/ntlm/auth_sam.c b/source4/auth/ntlm/auth_sam.c
index cf0656ae0da..0625c4f1268 100644
--- a/source4/auth/ntlm/auth_sam.c
+++ b/source4/auth/ntlm/auth_sam.c
@@ -90,8 +90,8 @@ static NTSTATUS authsam_password_ok(struct auth4_context *auth_context,
case AUTH_PASSWORD_RESPONSE:
status = ntlm_password_check(mem_ctx,
- lpcfg_lanman_auth(auth_context->lp_ctx),
- lpcfg_ntlm_auth(auth_context->lp_ctx),
+ false,
+ lpcfg_ntlm_auth(auth_context->lp_ctx),
user_info->logon_parameters,
&auth_context->challenge.data,
&user_info->password.response.lanman,