Change which session key we negotiate. This uses the NT-based session key that

we previously expected, rather than the LM based key.

A Win2k SPNEGO enabled join goes a *lot* further with this option on.

Andrew Bartlett
(This used to be commit b224938e4e843288630cdc7c3c3931b241bd0e1a)

diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 8fb5a50697bce6328d07de206a660dc630d7a59e..77f93812dd545f36260136de0fa28423303f610a 100644 (file)
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -312,7 +312,7 @@ static int reply_spnego_negotiate(connection_struct *conn,
           return the flags we want. Obviously this is not correct */
        
        chal_flags = NTLMSSP_NEGOTIATE_UNICODE | 
-               NTLMSSP_NEGOTIATE_LM_KEY | 
+               NTLMSSP_NEGOTIATE_128 | 
                NTLMSSP_NEGOTIATE_NTLM |
                NTLMSSP_CHAL_TARGET_INFO;