lanman auth = no should also disable the creation of the lmhash in the passdb backend (see discussion on samba ml "getting rid of lmhashes")
fixed in 3.0.23rc1