Hi Matthias,

> commit 0e637be43b584aef9f5101d15ae5bdc1172c5502
> Author: Matthias Dieter Wallnöfer <m...@samba.org>
> Date:   Mon Jun 21 19:40:50 2010 +0200
> 
>     s4:password_hash LDB module - fix another problem regarding the lanman 
> hash
>     
>     When a user only provides only the lanman hash (and nothing else) and the
>     lanman authentication is deactivated then we end in an account with no
>     password attribute at all! Lock this down.

I think the correct behavior is to reject the password change in that case.

metze

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to