s3:testparm: Warn about 'server schannel = no'

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Feb  9 03:08:42 UTC 2021 on sn-devel-184

diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c
index 2d717f197569625cfccc7215373c9a2640154cf3..e870104a2c5531a734057df3afc07d762a6cd506 100644 (file)
--- a/source3/utils/testparm.c
+++ b/source3/utils/testparm.c
@@ -525,6 +525,13 @@ static int do_global_checks(void)
                ret = 1;
        }
 
+       if (!lp_server_schannel()) {
+               fprintf(stderr,
+                       "WARNING: You have configured 'server schannel = no'. "
+                       "Your server is vulernable to \"ZeroLogon\" "
+                       "(CVE-2020-1472)\n\n");
+       }
+
        return ret;
 }