mirror of
https://github.com/samba-team/samba.git
synced 2025-02-19 21:57:57 +03:00
r1762: Ensure that a user (as opposed to guest) cannot login without SPNEGO,
when we have negotiated SPNEGO. Andrew Bartlett
This commit is contained in:
parent
f9d7b731c9
commit
07e3d2c4cd
@ -106,16 +106,18 @@ static NTSTATUS sesssetup_nt1(struct smbsrv_request *req, union smb_sesssetup *s
|
||||
if (req->smb_conn->negotiate.spnego_negotiated) {
|
||||
struct auth_context *auth_context;
|
||||
|
||||
if (sess->nt1.in.user && *sess->nt1.in.user) {
|
||||
return NT_STATUS_ACCESS_DENIED;
|
||||
} else {
|
||||
make_user_info_guest(&user_info);
|
||||
}
|
||||
|
||||
status = make_auth_context_subsystem(&auth_context);
|
||||
|
||||
if (!NT_STATUS_IS_OK(status)) {
|
||||
return status;
|
||||
}
|
||||
|
||||
if (!sess->nt1.in.user || !*sess->nt1.in.user) {
|
||||
make_user_info_guest(&user_info);
|
||||
}
|
||||
|
||||
status = auth_context->check_ntlm_password(auth_context,
|
||||
user_info,
|
||||
&server_info);
|
||||
|
Loading…
x
Reference in New Issue
Block a user