From 7d4692fa43fd84a8251231781fba7f3f9e46c30b Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 29 Dec 2009 15:54:59 +0100 Subject: s4:ntlmssp_server: clear session key in ntlmssp_server_preauth() metze --- source4/auth/ntlmssp/ntlmssp_server.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'source4/auth') diff --git a/source4/auth/ntlmssp/ntlmssp_server.c b/source4/auth/ntlmssp/ntlmssp_server.c index 7c165b8eea..7514b3234a 100644 --- a/source4/auth/ntlmssp/ntlmssp_server.c +++ b/source4/auth/ntlmssp/ntlmssp_server.c @@ -263,6 +263,7 @@ static NTSTATUS ntlmssp_server_preauth(struct gensec_ntlmssp_state *gensec_ntlms } /* zero these out */ + data_blob_free(&gensec_ntlmssp_state->session_key); data_blob_free(&gensec_ntlmssp_state->lm_resp); data_blob_free(&gensec_ntlmssp_state->nt_resp); data_blob_free(&gensec_ntlmssp_state->encrypted_session_key); @@ -575,15 +576,12 @@ NTSTATUS ntlmssp_server_auth(struct gensec_security *gensec_security, return nt_status; } - gensec_ntlmssp_state->session_key = data_blob_null; - if (gensec_security->want_features & (GENSEC_FEATURE_SIGN|GENSEC_FEATURE_SEAL|GENSEC_FEATURE_SESSION_KEY)) { nt_status = ntlmssp_server_postauth(gensec_security, &user_session_key, &lm_session_key); talloc_free(mem_ctx); return nt_status; } else { - gensec_ntlmssp_state->session_key = data_blob(NULL, 0); talloc_free(mem_ctx); return NT_STATUS_OK; } -- cgit