From 1691cd7738b89bec284646bc81f338d8027bfc79 Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Mon, 8 Feb 2021 09:48:16 +0100 Subject: [PATCH] s3:testparm: Warn about 'server schannel = no' Signed-off-by: Andreas Schneider Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Tue Feb 9 03:08:42 UTC 2021 on sn-devel-184 Conflict: NA Reference: https://gitlab.com/samba-team/samba/-/commit/1691cd7738b89bec284646bc81f338d8027bfc79 --- source3/utils/testparm.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/source3/utils/testparm.c b/source3/utils/testparm.c index 2d717f19756..e870104a2c5 100644 --- a/source3/utils/testparm.c +++ b/source3/utils/testparm.c @@ -525,6 +525,13 @@ static int do_global_checks(void) ret = 1; } + if (!lp_server_schannel()) { + fprintf(stderr, + "WARNING: You have configured 'server schannel = no'. " + "Your server is vulernable to \"ZeroLogon\" " + "(CVE-2020-1472)\n\n"); + } + return ret; } -- 2.33.0