diff options
author | Andrew Bartlett <abartlet@samba.org> | 2007-09-10 02:14:18 +0000 |
---|---|---|
committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 12:30:36 -0500 |
commit | 87d39f61b498c1327c2b3a818e41bb6451fe7518 (patch) | |
tree | effdd55b1429c8bec4141c08d27c8643c2f39c48 /source/param | |
parent | 0c5657b5eff60e3c52de8fbb4ce9346d0341854c (diff) | |
download | samba-87d39f61b498c1327c2b3a818e41bb6451fe7518.tar.gz samba-87d39f61b498c1327c2b3a818e41bb6451fe7518.tar.xz samba-87d39f61b498c1327c2b3a818e41bb6451fe7518.zip |
r25049: Set new, more secure defaults for Samba 3.2.
Andrew Bartlett
Diffstat (limited to 'source/param')
-rw-r--r-- | source/param/loadparm.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/source/param/loadparm.c b/source/param/loadparm.c index 2c6a5df3e59..b49d7b54a96 100644 --- a/source/param/loadparm.c +++ b/source/param/loadparm.c @@ -1574,10 +1574,10 @@ static void init_globals(BOOL first_time_only) Globals.bStatCache = True; /* use stat cache by default */ Globals.iMaxStatCacheSize = 1024; /* one Meg by default. */ Globals.restrict_anonymous = 0; - Globals.bClientLanManAuth = True; /* Do use the LanMan hash if it is available */ - Globals.bClientPlaintextAuth = True; /* Do use a plaintext password if is requested by the server */ - Globals.bLanmanAuth = True; /* Do use the LanMan hash if it is available */ - Globals.bNTLMAuth = True; /* Do use NTLMv1 if it is available (otherwise NTLMv2) */ + Globals.bClientLanManAuth = False; /* Do NOT use the LanMan hash if it is available */ + Globals.bClientPlaintextAuth = False; /* Do NOT use a plaintext password even if is requested by the server */ + Globals.bLanmanAuth = False; /* Do NOT use the LanMan hash, even if it is supplied */ + Globals.bNTLMAuth = True; /* Do use NTLMv1 if it is supplied by the client (otherwise NTLMv2) */ Globals.bClientNTLMv2Auth = False; /* Client should not use NTLMv2, as we can't tell that the server supports it. */ /* Note, that we will use NTLM2 session security (which is different), if it is available */ |