s3:auth_server: use cli->is_guestlogin instead of parsing cli->inbuf.
authorStefan Metzmacher <metze@samba.org>
Fri, 8 Jul 2011 10:59:32 +0000 (12:59 +0200)
committerStefan Metzmacher <metze@samba.org>
Fri, 8 Jul 2011 12:09:07 +0000 (14:09 +0200)
cli->inbuf is not the valid response buffer of the session setup response.

metze

source3/auth/auth_server.c

index da380db01ad0b8aa870c11826a531eb65c07e026..d50ed7a024b48983263311a3e6bbb3642c54ed10 100644 (file)
@@ -350,7 +350,7 @@ static NTSTATUS check_smbserver_security(const struct auth_context *auth_context
                         */
                        tested_password_server = True;
 
-                       if ((SVAL(cli->inbuf,smb_vwv2) & 1) == 0) {
+                       if (!cli->is_guestlogin) {
                                DEBUG(0,("server_validate: password server %s allows users as non-guest \
 with a bad password.\n", cli->desthost));
                                DEBUG(0,("server_validate: This is broken (and insecure) behaviour. Please do not \