libcli/raw: in SMB_SIGNING_ENGINE_BSRSPYL state it's ok to accept any signature

Even if signing is mandatory.

With NTLMSSP this happens for the session setup:

request1  => BSRSPYL
response1 => BSRSPYL
request2  => BSRSPYL
response2  => <SIGNATURE>

and with krb5:

request1  => BSRSPYL
response1  => <SIGNATURE>

metze

diff --git a/source4/libcli/raw/smb_signing.c b/source4/libcli/raw/smb_signing.c
index ae17dadf33560f072377609ca9ed848341f3a8f6..c23fb161283254aa3ae496c7fa2ec86ef8239ef3 100644 (file)
--- a/source4/libcli/raw/smb_signing.c
+++ b/source4/libcli/raw/smb_signing.c
@@ -310,6 +310,8 @@ bool smbcli_request_check_sign_mac(struct smbcli_request *req)
        case SMB_SIGNING_ENGINE_OFF:
                return true;
        case SMB_SIGNING_ENGINE_BSRSPYL:
+               return true;
+
        case SMB_SIGNING_ENGINE_ON:
        {                       
                if (req->in.size < (HDR_SS_FIELD + 8)) {