selftest:Samba3: allow lanman auth in setup_nt4_member

Note that the LM HASH is only generated for passwords
up to 14 characters...

We use extra_options_before_inject in order to
allow overriding any existing parameter.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=9705

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/selftest/knownfail b/selftest/knownfail
index e0db191e2f4df8c3263221bca718525c9526114a..9507b14208987398e47c480063bbf1a48b21897c 100644 (file)
--- a/selftest/knownfail
+++ b/selftest/knownfail
@@ -321,9 +321,9 @@
 ^samba4.smb.signing.*disabled.*client-protection=off.*\(ad_dc\)
 # fl2000dc doesn't support AES
 ^samba4.krb5.kdc.*as-req-aes.fl2000dc
-# nt4_member and ad_member don't support ntlmv1 (not even over SMB1)
-^samba3.blackbox.smbclient_auth.plain.*option=clientntlmv2auth=no.member.creds.*as.user.*_member
-^samba3.blackbox.smbclient_auth.plain.*option=clientntlmv2auth=no.*mNT1.member.creds.*as.user.*_member
+# ad_member don't support ntlmv1 (not even over SMB1)
+^samba3.blackbox.smbclient_auth.plain.*option=clientntlmv2auth=no.member.creds.*as.user.*ad_member
+^samba3.blackbox.smbclient_auth.plain.*option=clientntlmv2auth=no.*mNT1.member.creds.*as.user.*ad_member
 #nt-vfs server blocks read with execute access
 ^samba4.smb2.read.access
 #ntvfs server blocks copychunk with execute access on read handle

diff --git a/selftest/target/Samba3.pm b/selftest/target/Samba3.pm
index 547818a28c644365bcda189ccf5f0b2caaf3a20c..a47678b9da23901d9b360afb38165d6b0103db24 100755 (executable)
--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -423,6 +423,8 @@ sub setup_nt4_member
 
        my $member_options = "
        security = domain
+       lanman auth = yes
+       ntlm auth = yes
        dbwrap_tdb_mutexes:* = yes
        ${require_mutexes}
 ";
@@ -430,8 +432,8 @@ sub setup_nt4_member
            prefix => $prefix,
            domain => $nt4_dc_vars->{DOMAIN},
            server => "LOCALNT4MEMBER3",
-           password => "localnt4member3pass",
-           extra_options => $member_options);
+           password => "Lnt4member3p14",
+           extra_options_before_inject => $member_options);
 
        $ret or return undef;