diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2013-01-22 14:45:14 +1100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2013-01-24 14:18:22 +0100 |
| commit | df004b5014b92b987f907047d2ca9f567e3d0ac1 (patch) | |
| tree | c21d7133753eb90360201d431372601cefcdd9a8 | |
| parent | 497febfe36354c4aff3696cd32c6c7e8fee55af8 (diff) | |
| download | samba-df004b5014b92b987f907047d2ca9f567e3d0ac1.tar.gz samba-df004b5014b92b987f907047d2ca9f567e3d0ac1.tar.bz2 samba-df004b5014b92b987f907047d2ca9f567e3d0ac1.zip | |
gensec: Allow login without a PAC by default (bug #9581)
The sense of this test was inverted. We only want to take the ACCESS_DENIED error
if gensec:require_pac=true.
Andrew Bartlett
Reviewed-by: Stefan Metzmacher <metze@samba.org>
| -rw-r--r-- | auth/gensec/gensec_util.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/auth/gensec/gensec_util.c b/auth/gensec/gensec_util.c index d732213551..64952b1983 100644 --- a/auth/gensec/gensec_util.c +++ b/auth/gensec/gensec_util.c @@ -42,7 +42,7 @@ NTSTATUS gensec_generate_session_info_pac(TALLOC_CTX *mem_ctx, session_info_flags |= AUTH_SESSION_INFO_DEFAULT_GROUPS; if (!pac_blob) { - if (!gensec_setting_bool(gensec_security->settings, "gensec", "require_pac", false)) { + if (gensec_setting_bool(gensec_security->settings, "gensec", "require_pac", false)) { DEBUG(1, ("Unable to find PAC in ticket from %s, failing to allow access\n", principal_string)); return NT_STATUS_ACCESS_DENIED; |