From 7deacc615e92221548fea940b0e90fe03a3ec098 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 9 Sep 2008 17:56:11 +0200 Subject: libcli/raw: in SMB_SIGNING_ENGINE_BSRSPYL state it's ok to accept any signature Even if signing is mandatory. With NTLMSSP this happens for the session setup: request1 => BSRSPYL response1 => BSRSPYL request2 => BSRSPYL response2 => and with krb5: request1 => BSRSPYL response1 => metze --- source4/libcli/raw/smb_signing.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/source4/libcli/raw/smb_signing.c b/source4/libcli/raw/smb_signing.c index ae17dadf33..c23fb16128 100644 --- a/source4/libcli/raw/smb_signing.c +++ b/source4/libcli/raw/smb_signing.c @@ -310,6 +310,8 @@ bool smbcli_request_check_sign_mac(struct smbcli_request *req) case SMB_SIGNING_ENGINE_OFF: return true; case SMB_SIGNING_ENGINE_BSRSPYL: + return true; + case SMB_SIGNING_ENGINE_ON: { if (req->in.size < (HDR_SS_FIELD + 8)) { -- cgit