From be44f3094616b8092719fa45886ffb0d38d7c2b8 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 15 Jan 2025 11:57:12 +0100 Subject: [PATCH 1/2] s4:auth/ntlm: let authsam_check_password_internals() add NETLOGON_NTLMV2_ENABLED Windows returns NETLOGON_NTLMV2_ENABLED in all netr_LogonSamLogon* response messages. Even if NTLMv1 was actually used and also for password authentication. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15783 Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider (cherry picked from commit 1414004ee953975c50e0ee374684ff8e01246946) --- source4/auth/ntlm/auth_sam.c | 1 + 1 file changed, 1 insertion(+) diff --git a/source4/auth/ntlm/auth_sam.c b/source4/auth/ntlm/auth_sam.c index e3eef793cd13..4657720316a5 100644 --- a/source4/auth/ntlm/auth_sam.c +++ b/source4/auth/ntlm/auth_sam.c @@ -1124,6 +1124,7 @@ static NTSTATUS authsam_check_password_internals(struct auth_method_context *ctx talloc_free(tmp_ctx); return nt_status; } + (*user_info_dc)->info->user_flags |= NETLOGON_NTLMV2_ENABLED; result = dsdb_is_protected_user(ctx->auth_ctx->sam_ctx, (*user_info_dc)->sids, -- 2.34.1 From c7a9f30c35545aac25c41ab1a494f4ba23377490 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 15 Jan 2025 12:41:21 +0100 Subject: [PATCH 2/2] s3:auth: let check_sam_security() add NETLOGON_NTLMV2_ENABLED BUG: https://bugzilla.samba.org/show_bug.cgi?id=15783 Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider (cherry picked from commit 10f38aff7c23dc20bc98cf0e02a430f8b0d7b1ad) --- source3/auth/check_samsec.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/source3/auth/check_samsec.c b/source3/auth/check_samsec.c index 1e55fedb6151..cfaf413eba0d 100644 --- a/source3/auth/check_samsec.c +++ b/source3/auth/check_samsec.c @@ -575,6 +575,8 @@ NTSTATUS check_sam_security(const DATA_BLOB *challenge, goto done; } + (*server_info)->info3->base.user_flags |= NETLOGON_NTLMV2_ENABLED; + (*server_info)->session_key = data_blob_talloc(*server_info, user_sess_key.data, user_sess_key.length); -- 2.34.1