From: Jelmer Vernooij <jelmer@samba.org>
Date: Fri, 31 Oct 2008 14:07:34 +0000 (+0100)
Subject: Disable lanman authentication by default in Samba 4.
X-Git-Url: http://git.samba.org/samba.git/?p=kai%2Fsamba.git;a=commitdiff_plain;h=069a6f0e4b59bb76191fa4011adf8d97cfd69011;hp=7f8bc6a2d904bd5b5c056ec96a68ee928659324a

Disable lanman authentication by default in Samba 4.
---

diff --git a/selftest/selftest.pl b/selftest/selftest.pl
index aa99b2ed6fb..292a2d2dd6b 100755
--- a/selftest/selftest.pl
+++ b/selftest/selftest.pl
@@ -578,6 +578,7 @@ sub write_clientconf($$)
 	notify:inotify = false
 	ldb:nosync = true
 	system:anonymous = true
+	client lanman auth = Yes
 	torture:basedir = $prefix_abs/client
 #We don't want to pass our self-tests if the PAC code is wrong
 	gensec:require_pac = true
diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index 8c79a314488..5cc34c76fd5 100644
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -572,6 +572,7 @@ sub provision($$$$$$)
 #We don't want to pass our self-tests if the PAC code is wrong
 	gensec:require_pac = true
 	log level = $server_loglevel
+	lanman auth = Yes
 
 [tmp]
 	path = $tmpdir
diff --git a/source4/param/loadparm.c b/source4/param/loadparm.c
index a019c951de7..18b3dcf75d8 100644
--- a/source4/param/loadparm.c
+++ b/source4/param/loadparm.c
@@ -2361,8 +2361,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
 	lp_do_global_parameter(lp_ctx, "TimeServer", "False");
 	lp_do_global_parameter(lp_ctx, "BindInterfacesOnly", "False");
 	lp_do_global_parameter(lp_ctx, "Unicode", "True");
-	lp_do_global_parameter(lp_ctx, "ClientLanManAuth", "True");
-	lp_do_global_parameter(lp_ctx, "LanmanAuth", "True");
+	lp_do_global_parameter(lp_ctx, "ClientLanManAuth", "False");
+	lp_do_global_parameter(lp_ctx, "LanmanAuth", "False");
 	lp_do_global_parameter(lp_ctx, "NTLMAuth", "True");
 	lp_do_global_parameter(lp_ctx, "client use spnego principal", "False");