mirror of
https://github.com/samba-team/samba.git
synced 2025-03-08 04:58:40 +03:00
s4:password_hash Only store the LM hash if 'lanman auth = yes'
The clients that do only lanman auth are on their way out, the passwords are case insensitive, it does not support unicode and we should not store such a poor hash of the password if we can avoid it. Andrew Bartlett
This commit is contained in:
parent
ec131db4f1
commit
1a06b31b59
@ -1379,7 +1379,8 @@ static int setup_password_fields(struct setup_password_fields_io *io)
|
||||
if (io->n.cleartext_utf8) {
|
||||
struct samr_Password *lm_hash;
|
||||
char *cleartext_unix;
|
||||
if (convert_string_talloc_convenience(io->ac, lp_iconv_convenience(ldb_get_opaque(ldb, "loadparm")),
|
||||
if (lp_lanman_auth(ldb_get_opaque(ldb, "loadparm")) &&
|
||||
convert_string_talloc_convenience(io->ac, lp_iconv_convenience(ldb_get_opaque(ldb, "loadparm")),
|
||||
CH_UTF8, CH_UNIX, io->n.cleartext_utf8->data, io->n.cleartext_utf8->length,
|
||||
(void **)&cleartext_unix, &converted_pw_len, false)) {
|
||||
lm_hash = talloc(io->ac, struct samr_Password);
|
||||
|
Loading…
x
Reference in New Issue
Block a user