summaryrefslogtreecommitdiffstats
path: root/source3/param
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2014-09-23 14:08:10 -0700
committerAndrew Bartlett <abartlet@samba.org>2014-10-08 01:09:51 +0200
commit14f6256c515ff4af4f478f947ad89b7edc8743cf (patch)
treea79b05d58b6326c842d3ce5ab6859880bd53cc11 /source3/param
parent91d6f603b196d1f10500dff312d614d8d46cb846 (diff)
downloadsamba-14f6256c515ff4af4f478f947ad89b7edc8743cf.tar.gz
samba-14f6256c515ff4af4f478f947ad89b7edc8743cf.tar.xz
samba-14f6256c515ff4af4f478f947ad89b7edc8743cf.zip
s3-winbindd: Allow winbindd to connect over SMB2 to servers
This allows SMB signing to work against many more DCs, and so improves network security. The default for "client max protocol" remains NT1 in the rest of the code. Andrew Bartlett Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source3/param')
-rw-r--r--source3/param/loadparm.c20
1 files changed, 19 insertions, 1 deletions
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 5ab0de7110..52ffbccd3c 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -642,7 +642,7 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
Globals.max_open_files = max_open_files();
Globals.server_max_protocol = PROTOCOL_SMB3_00;
Globals.server_min_protocol = PROTOCOL_LANMAN1;
- Globals.client_max_protocol = PROTOCOL_NT1;
+ Globals._client_max_protocol = PROTOCOL_DEFAULT;
Globals.client_min_protocol = PROTOCOL_CORE;
Globals._security = SEC_AUTO;
Globals.encrypt_passwords = true;
@@ -4335,6 +4335,24 @@ int lp_security(void)
lp__security());
}
+int lp_client_max_protocol(void)
+{
+ int client_max_protocol = lp__client_max_protocol();
+ if (client_max_protocol == PROTOCOL_DEFAULT) {
+ return PROTOCOL_NT1;
+ }
+ return client_max_protocol;
+}
+
+int lp_winbindd_max_protocol(void)
+{
+ int client_max_protocol = lp__client_max_protocol();
+ if (client_max_protocol == PROTOCOL_DEFAULT) {
+ return PROTOCOL_LATEST;
+ }
+ return client_max_protocol;
+}
+
struct loadparm_global * get_globals(void)
{
return &Globals;