summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2013-01-22 14:45:14 +1100
committerStefan Metzmacher <metze@samba.org>2013-01-24 14:18:22 +0100
commitdf004b5014b92b987f907047d2ca9f567e3d0ac1 (patch)
treec21d7133753eb90360201d431372601cefcdd9a8
parent497febfe36354c4aff3696cd32c6c7e8fee55af8 (diff)
downloadsamba-df004b5014b92b987f907047d2ca9f567e3d0ac1.tar.gz
samba-df004b5014b92b987f907047d2ca9f567e3d0ac1.tar.bz2
samba-df004b5014b92b987f907047d2ca9f567e3d0ac1.zip
gensec: Allow login without a PAC by default (bug #9581)
The sense of this test was inverted. We only want to take the ACCESS_DENIED error if gensec:require_pac=true. Andrew Bartlett Reviewed-by: Stefan Metzmacher <metze@samba.org>
-rw-r--r--auth/gensec/gensec_util.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/auth/gensec/gensec_util.c b/auth/gensec/gensec_util.c
index d732213551..64952b1983 100644
--- a/auth/gensec/gensec_util.c
+++ b/auth/gensec/gensec_util.c
@@ -42,7 +42,7 @@ NTSTATUS gensec_generate_session_info_pac(TALLOC_CTX *mem_ctx,
session_info_flags |= AUTH_SESSION_INFO_DEFAULT_GROUPS;
if (!pac_blob) {
- if (!gensec_setting_bool(gensec_security->settings, "gensec", "require_pac", false)) {
+ if (gensec_setting_bool(gensec_security->settings, "gensec", "require_pac", false)) {
DEBUG(1, ("Unable to find PAC in ticket from %s, failing to allow access\n",
principal_string));
return NT_STATUS_ACCESS_DENIED;