diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2005-10-20 10:25:51 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 13:45:04 -0500 |
| commit | 2817ef9f53e30c509ccf972beab617a897bd6724 (patch) | |
| tree | c41ccb71a4689f0f028a3b2ac0d49993a0f77eba /source4 | |
| parent | d820c353dc45970d4648d9ff0b909366f8f00812 (diff) | |
| download | samba-2817ef9f53e30c509ccf972beab617a897bd6724.tar.gz samba-2817ef9f53e30c509ccf972beab617a897bd6724.tar.bz2 samba-2817ef9f53e30c509ccf972beab617a897bd6724.zip | |
r11219: Now that we have the credentials hooked in here, we have a much more
reasonable value to fill in for the mechListMIC.
Andrew Bartlett
(This used to be commit 51d78de2b79f4ab75c86c3255c23a478c6822a0e)
Diffstat (limited to 'source4')
| -rw-r--r-- | source4/auth/gensec/spnego.c | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/source4/auth/gensec/spnego.c b/source4/auth/gensec/spnego.c index 00d6e709eb..23be294a17 100644 --- a/source4/auth/gensec/spnego.c +++ b/source4/auth/gensec/spnego.c @@ -411,6 +411,7 @@ static NTSTATUS gensec_spnego_create_negTokenInit(struct gensec_security *gensec const char **mechTypes = NULL; DATA_BLOB unwrapped_out = data_blob(NULL, 0); const struct gensec_security_ops_wrapper *all_sec; + const char *principal = NULL; mechTypes = gensec_security_oids(out_mem_ctx, GENSEC_OID_SPNEGO); @@ -461,11 +462,19 @@ static NTSTATUS gensec_spnego_create_negTokenInit(struct gensec_security *gensec spnego_out.negTokenInit.reqFlags = 0; if (spnego_state->state_position == SPNEGO_SERVER_START) { + /* server credentails */ + struct cli_credentials *creds = gensec_get_credentials(gensec_security); + if (creds) { + principal = cli_credentials_get_principal(creds, out_mem_ctx); + } + } + if (principal) { spnego_out.negTokenInit.mechListMIC - = data_blob_string_const(talloc_asprintf(out_mem_ctx, "%s$@%s", lp_netbios_name(), lp_realm())); + = data_blob_string_const(principal); } else { spnego_out.negTokenInit.mechListMIC = null_data_blob; } + spnego_out.negTokenInit.mechToken = unwrapped_out; if (spnego_write_data(out_mem_ctx, out, &spnego_out) == -1) { |