winbindd: Do not make anonymous connections by default
authorAndrew Bartlett <abartlet@samba.org>
Fri, 5 Sep 2014 05:00:31 +0000 (17:00 +1200)
committerStefan Metzmacher <metze@samba.org>
Tue, 30 Sep 2014 10:32:05 +0000 (12:32 +0200)
commite2cd3257141bd4a88cda1fff5bde9df60b253a97
tree966c4149fa1aaf989840879ee77fea0dc0d89bda
parentb9701a0a79dd15dd6f53075638fba9a2a3d92e19
winbindd: Do not make anonymous connections by default

The requirement is that we have "winbind sealed pipes = false" and
"require strong key = false" before we make anonymous connections.
These are a security risk as we cannot prevent MITM attacks.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source3/winbindd/winbindd_cm.c