mirror of
https://github.com/samba-team/samba.git
synced 2025-03-01 04:58:35 +03:00
s3:smb2_server: allow reauthentication without signing
If signing is not required we should not require it for reauthentication. Windows clients would otherwise fail to reauthenticate. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10958 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
This commit is contained in:
parent
81f99bd5c1
commit
382019656e
@ -1990,11 +1990,6 @@ NTSTATUS smbd_smb2_request_dispatch(struct smbd_smb2_request *req)
|
||||
if (x != NULL) {
|
||||
signing_required = x->global->signing_required;
|
||||
encryption_required = x->global->encryption_required;
|
||||
|
||||
if (opcode == SMB2_OP_SESSSETUP &&
|
||||
x->global->signing_key.length > 0) {
|
||||
signing_required = true;
|
||||
}
|
||||
}
|
||||
|
||||
req->do_signing = false;
|
||||
|
@ -422,6 +422,10 @@ static NTSTATUS smbd_smb2_reauth_generic_return(struct smbXsrv_session *session,
|
||||
|
||||
conn_clear_vuid_caches(smb2req->sconn, session->compat->vuid);
|
||||
|
||||
if (security_session_user_level(session_info, NULL) >= SECURITY_USER) {
|
||||
smb2req->do_signing = true;
|
||||
}
|
||||
|
||||
*out_session_id = session->global->session_wire_id;
|
||||
|
||||
return NT_STATUS_OK;
|
||||
|
Loading…
x
Reference in New Issue
Block a user