summaryrefslogtreecommitdiff
path: root/source3/smbd
diff options
context:
space:
mode:
Diffstat (limited to 'source3/smbd')
-rw-r--r--source3/smbd/auth.c2
-rw-r--r--source3/smbd/auth_util.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/source3/smbd/auth.c b/source3/smbd/auth.c
index 67f80afdda..95c97182b8 100644
--- a/source3/smbd/auth.c
+++ b/source3/smbd/auth.c
@@ -36,7 +36,7 @@ static BOOL check_domain_match(char *user, char *domain)
*/
if (!lp_allow_trusted_domains() &&
- !strequal(lp_workgroup(), domain) ) {
+ (!strequal(lp_workgroup(), domain) || strequal("", domain))) {
DEBUG(1, ("check_domain_match: Attempt to connect as user %s from domain %s denied.\n", user, domain));
return False;
} else {
diff --git a/source3/smbd/auth_util.c b/source3/smbd/auth_util.c
index d442f73a93..3f03097de4 100644
--- a/source3/smbd/auth_util.c
+++ b/source3/smbd/auth_util.c
@@ -426,7 +426,7 @@ BOOL make_user_info_winbind(auth_usersupplied_info **user_info,
/* WATCH OUT. This doesn't work if the incoming password is incorrectly cased.
We might want to add a check here and only do an LM in that case */
- SMBNTencrypt((uchar *)password, chal, local_nt_response);
+ SMBNTencrypt((const uchar *)password, chal, local_nt_response);
local_lm_blob = data_blob(local_lm_response, sizeof(local_lm_response));
local_nt_blob = data_blob(local_nt_response, sizeof(local_nt_response));