From: Andreas Schneider <asn@samba.org>
Date: Mon, 8 Feb 2021 08:48:16 +0000 (+0100)
Subject: s3:testparm: Warn about 'server schannel = no'
X-Git-Tag: tevent-0.11.0~1784
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1691cd7738b89bec284646bc81f338d8027bfc79;p=thirdparty%2Fsamba.git

s3:testparm: Warn about 'server schannel = no'

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Feb  9 03:08:42 UTC 2021 on sn-devel-184
---

diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c
index 2d717f19756..e870104a2c5 100644
--- a/source3/utils/testparm.c
+++ b/source3/utils/testparm.c
@@ -525,6 +525,13 @@ static int do_global_checks(void)
 		ret = 1;
 	}
 
+	if (!lp_server_schannel()) {
+		fprintf(stderr,
+			"WARNING: You have configured 'server schannel = no'. "
+			"Your server is vulernable to \"ZeroLogon\" "
+			"(CVE-2020-1472)\n\n");
+	}
+
 	return ret;
 }