Skip to content

Disable NTLMSSP for ldap client connections (e.g. libads)

Pavel Filipenský requested to merge samba-team/devel/samba:pfilipen-disable-ntlmssp into master

This fix disables NTLMSSP in the FIPS mode. Weak encryption is already disabled when in FIPS mode on the lower layers. The fix introduces checks already in the libads and issues proper debug traces.

Checklist

  • Commits have Signed-off-by: with name/author being identical to the commit author
  • (optional) This MR is just one part towards a larger feature.
  • (optional, if backport required) Bugzilla bug filed and BUG: tag added
  • Test suite updated with functionality tests
  • Test suite updated with negative tests
  • Documentation updated
  • CI timeout is 3h or higher (see Settings/CICD/General pipelines/ Timeout)

Reviewer's checklist:

  • There is a test suite reasonably covering new functionality or modifications
  • Function naming, parameters, return values, types, etc., are consistent and according to README.Coding.md
  • This feature/change has adequate documentation added
  • No obvious mistakes in the code

Merge request reports