From c688a1e18ff5e3f50005a8438bdbfb0e4382ca18 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Tue, 6 Jul 2004 17:58:56 +0000
Subject: r1365: in SPNEGO_SERVER_TARG we should not check the spnego_negResult
 because the client don't send this

metze
(This used to be commit b1217a4ef6592082bb02fd0596a0563bacdf1d8e)
---
 source4/libcli/auth/spnego.c | 9 ---------
 1 file changed, 9 deletions(-)

(limited to 'source4/libcli/auth')

diff --git a/source4/libcli/auth/spnego.c b/source4/libcli/auth/spnego.c
index 02bc9043f5..aa0f83700d 100644
--- a/source4/libcli/auth/spnego.c
+++ b/source4/libcli/auth/spnego.c
@@ -340,10 +340,6 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA
 				  spnego_state->expected_packet));
 			return NT_STATUS_INVALID_PARAMETER;
 		}
-	
-		if (spnego.negTokenTarg.negResult == SPNEGO_REJECT) {
-			return NT_STATUS_ACCESS_DENIED;
-		}
 		
 		if (spnego.negTokenTarg.responseToken.length) {
 			nt_status = gensec_update(spnego_state->sub_sec_security,
@@ -355,11 +351,6 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA
 			nt_status = NT_STATUS_OK;
 		}
 		
-		if (NT_STATUS_IS_OK(nt_status) 
-		    && (spnego.negTokenTarg.negResult != SPNEGO_ACCEPT_COMPLETED)) {
-			nt_status = NT_STATUS_INVALID_PARAMETER;
-		}
-		
 		spnego_state->result = spnego.negTokenTarg.negResult;
 		spnego_free_data(&spnego);
 		
-- 
cgit