1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
samba-mirror/docs-xml/manpages
Herwin Weststrate 0b500d413c Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth
An implementation of https://lists.samba.org/archive/samba/2012-March/166497.html (which has been discussed in 2012, but was never implemented).

It has been tested on a Debian Jessie system with this patch added to the Debian package (which is currently 4.1.17). Even though this is Samba 4, the ntlm_auth installed is the one from Samba 3 (yes, it surprised me too). The backend was a machine with Windows 2012R2.

It was first tested with the local security policy 'Network Security: LAN Manager authentication level' setting changed to 'Send NTLMv2 Response Only' (allow ntlm v1). This way we are able to authenticate with and without the MSV1_0_ALLOW_MSVCHAPV2 flag (as expected).

After the basic step has been verified, the local security policy 'Network Security: LAN Manager authentication level' setting was changed to 'Send NTLMv2 Response Only. Refuse LM & NTLM' (only allow ntlm v2). The behaviour now changed according to the MSV1_0_ALLOW_MSVCHAPV2 flag (again: as expected).

  $ ntlm_auth --request-nt-key --username=XXXXXXXXXXXXX --challenge=XXXXXXXXXXXXXXXXX --nt-response=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --domain=
  Logon failure (0xc000006d)
  $ ntlm_auth --request-nt-key --username=XXXXXXXXXXXXX --challenge=XXXXXXXXXXXXXXXXX --nt-response=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --domain= --allow-mschapv2
  NT_KEY: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

The changes in `wbclient.h` are intended for programs that use libwinbind directly instead of authenticating via `ntlm_auth`. I intend to use that within FreeRADIUS (see https://bugzilla.samba.org/show_bug.cgi?id=11149).

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11694
Signed-off-by: Herwin Weststrate <herwin@quarantainenet.nl>
Reviewed-by: Kai Blin <kai@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2016-03-11 22:58:18 +01:00
..
cifsdd.8.xml docs: Add manpage for cifsdd 2016-02-18 18:05:55 +01:00
dbwrap_tool.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
eventlogadm.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
findsmb.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_ad.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_autorid.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_hash.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_ldap.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_nss.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_rfc2307.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_rid.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_script.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_tdb2.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
idmap_tdb.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
libsmbclient.7.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
lmhosts.5.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
log2pcap.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
net.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
nmbd.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
nmblookup.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
ntlm_auth.1.xml Added MSV1_0_ALLOW_MSVCHAPV2 flag to ntlm_auth 2016-03-11 22:58:18 +01:00
pam_winbind.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
pam_winbind.conf.5.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
pdbedit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
profiles.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
rpcclient.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
samba-regedit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
samba-tool.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
samba.7.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
samba.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
sharesec.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smb.conf.5.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbcacls.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbclient.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbcontrol.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbcquotas.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbd.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbget.1.xml s3:utils/smbget update manpage with -P option removal 2016-02-26 11:31:32 +01:00
smbgetrc.5.xml s3-utils/smbget: Update manpages for parameter changes 2016-01-28 09:58:26 +01:00
smbpasswd.5.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbpasswd.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbspool_krb5_wrapper.8.xml docs-xml: fix typo in smbspool_krb5_wrapper manpage. 2016-02-04 09:29:16 +01:00
smbspool.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbstatus.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbtar.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
smbtree.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
testparm.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_acl_tdb.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_acl_xattr.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_aio_fork.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_aio_linux.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_aio_pthread.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_audit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_btrfs.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_cacheprime.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_cap.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_catia.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_ceph.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_commit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_crossrename.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_default_quota.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_dirsort.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_extd_audit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_fake_perms.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_fileid.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_fruit.8.xml docs: update vfs_fruit manpage 2016-03-10 00:08:11 +01:00
vfs_full_audit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_glusterfs.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_gpfs.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_linux_xfs_sgid.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_media_harmony.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_netatalk.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_offline.8.xml vfs_offline: add documentation 2015-11-05 01:22:48 +01:00
vfs_prealloc.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_preopen.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_readahead.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_readonly.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_recycle.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_shadow_copy2.8.xml vfs_shadow_copy2: documentation for snapsharepath 2016-01-26 00:06:16 +01:00
vfs_shadow_copy.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_shell_snap.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_snapper.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_streams_depot.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_streams_xattr.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_syncops.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_time_audit.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_tsmsm.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_unityed_media.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_worm.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_xattr_tdb.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfs_zfsacl.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
vfstest.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
wbinfo.1.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
winbind_krb5_locator.7.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00
winbindd.8.xml docs: Bump version up to 4.4. 2016-01-19 21:34:14 +01:00