- got client code cleartext passwords working again in cli_session_setup.

  needed this for some tests.

- removed code that said "if lm password is not encrypted then encrypt both
  lm and nt passwords".  actually it said "if lm password length is not 24
  bytes and we're in security=user mode..."

  it didn't bother to check whether the nt password was NULL or not, and
  doing the encryption inside cli_session_setup is the wrong place.

- checked all instances where cli_session_setup is called with cleartext
  passwords that are expected to then be encrypted (see above) with the
  test "if pwlen != 24...".  there was only one: all the others either
  provide encrypted passwords, do null sessions or use
  cli_establish_connection.

* recommendation: use cli_establish_connection() in smbwrapper/smbw.c
(This used to be commit 2a509e9606f8aefbefa6e7b49878726464dbed44)

1 files changed, 26 insertions, 20 deletions

diff --git a/source3/libsmb/clientgen.c b/source3/libsmb/clientgen.c
index a1a5bbf0a9..428f8e237f 100644
--- a/source3/libsmb/clientgen.c
+++ b/source3/libsmb/clientgen.c
@@ -696,36 +696,42 @@ BOOL cli_session_setup(struct cli_state *cli,
 	fstring pword, ntpword;
 
 	if (cli->protocol < PROTOCOL_LANMAN1)
+	{
 		return True;
+	}
 
-	if (passlen > sizeof(pword)-1 || ntpasslen > sizeof(ntpword)-1) {
+	if (passlen > sizeof(pword)-1 || ntpasslen > sizeof(ntpword)-1)
+	{
 		return False;
 	}
 
-        if (((passlen == 0) || (passlen == 1)) && (pass[0] == '\0')) {
-          /* Null session connect. */
-          pword[0] = '\0';
-          ntpword[0] = '\0';
-        } else {
-          if ((cli->sec_mode & 2) && passlen != 24) {
-            passlen = 24;
-            ntpasslen = 24;
-            SMBencrypt((uchar *)pass,(uchar *)cli->cryptkey,(uchar *)pword);
-            SMBNTencrypt((uchar *)ntpass,(uchar *)cli->cryptkey,(uchar *)ntpword);
-          } else {
-		  fstrcpy(pword, pass);
-		  fstrcpy(ntpword, "");
-		  ntpasslen = 0;
-          }
-        }
-
-	/* if in share level security then don't send a password now */
-	if (!(cli->sec_mode & 1)) {
+	if (!IS_BITS_SET_ALL(cli->sec_mode, 1))
+	{
+		/* if in share level security then don't send a password now */
 		fstrcpy(pword, "");
 		passlen=1;
 		fstrcpy(ntpword, "");
 		ntpasslen=1;
 	} 
+	else if (((passlen == 0) || (passlen == 1)) && (pass[0] == '\0'))
+	{
+		/* Null session connect. */
+		pword[0] = '\0';
+		ntpword[0] = '\0';
+	}
+	else if (passlen == 24 && ntpasslen == 24)
+	{
+		/* encrypted password send, implicit from 24-byte lengths */
+		memcpy(pword, pass, 24);
+		memcpy(ntpword, ntpass, 24);
+	}
+	else
+	{
+		/* plain-text password send */
+		fstrcpy(pword, pass);
+		fstrcpy(ntpword, "");
+		ntpasslen = 0;
+	}
 
 	/* send a session setup command */
 	bzero(cli->outbuf,smb_size);