For NTLM2 (not yet even close to real implementation) we must use the

server hash for checking the server's signiture.

Andrew Bartlett
(This used to be commit 61255a2b3694ba13c72a2a33e5956d14c7d4d2c1)

diff --git a/source3/libsmb/ntlmssp_sign.c b/source3/libsmb/ntlmssp_sign.c
index 5426263fb97d67fa656eca05d2bfa0aa7cafbe89..86faf1f5e652f103aa7530c8cee91feff8ad52af 100644 (file)
--- a/source3/libsmb/ntlmssp_sign.c
+++ b/source3/libsmb/ntlmssp_sign.c
@@ -121,7 +121,7 @@ static NTSTATUS ntlmssp_make_packet_signiture(NTLMSSP_CLIENT_STATE *ntlmssp_stat
                        NTLMSSPcalc_ap(ntlmssp_state->cli_sign_hash,  sig->data, sig->length);
                        break;
                case NTLMSSP_RECEIVE:
-                       NTLMSSPcalc_ap(ntlmssp_state->cli_sign_hash,  sig->data, sig->length);
+                       NTLMSSPcalc_ap(ntlmssp_state->srv_sign_hash,  sig->data, sig->length);
                        break;
                }
        } else {