diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2006-01-28 12:15:24 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:51:33 -0500 |
| commit | 44e601b5ad635ba29088fd4c747627dee8d62112 (patch) | |
| tree | db7939e1e24dfd0b4e2fdc3a9bb5a447e4922e81 /source4/auth/credentials/credentials_ntlm.c | |
| parent | 210d3c1dc760af8e21fbfd5b23e87a1c937051d4 (diff) | |
| download | samba-44e601b5ad635ba29088fd4c747627dee8d62112.tar.gz samba-44e601b5ad635ba29088fd4c747627dee8d62112.tar.bz2 samba-44e601b5ad635ba29088fd4c747627dee8d62112.zip | |
r13206: This patch finally re-adds a -k option that works reasonably.
From here we can add tests to Samba for kerberos, forcing it on and
off. In the process, I also remove the dependency of credentials on
GENSEC.
This also picks up on the idea of bringing 'set_boolean' into general
code from jpeach's cifsdd patch.
Andrew Bartlett
(This used to be commit 1ac7976ea6e3ad6184c911de5df624c44e7c5228)
Diffstat (limited to 'source4/auth/credentials/credentials_ntlm.c')
| -rw-r--r-- | source4/auth/credentials/credentials_ntlm.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/source4/auth/credentials/credentials_ntlm.c b/source4/auth/credentials/credentials_ntlm.c index c7932e6f1a..5068540a32 100644 --- a/source4/auth/credentials/credentials_ntlm.c +++ b/source4/auth/credentials/credentials_ntlm.c @@ -66,6 +66,10 @@ NTSTATUS cli_credentials_get_ntlm_response(struct cli_credentials *cred, TALLOC_ if (cred->machine_account) { *flags = *flags & ~CLI_CRED_LANMAN_AUTH; } + + if (cred->use_kerberos == CRED_MUST_USE_KERBEROS) { + return NT_STATUS_ACCESS_DENIED; + } if (!nt_hash) { static const uint8_t zeros[16]; |