r5940: fix schannel against w2k, it skips the confounder in the signature (24 bytes...

but it accepts 32 bytes from the client.

(w2k3 accept it the otherway arround too)

metze
(This used to be commit 08d4c3b9f8558ee40c73a22b3ec110b052f28110)

diff --git a/source4/libcli/auth/schannel.c b/source4/libcli/auth/schannel.c
index a5521d46263cbe2dde69365b532c4f87f2b8d865..d582ff2dd0ee0b4c8053caa6224af7ce9bfaf33e 100644 (file)
--- a/source4/libcli/auth/schannel.c
+++ b/source4/libcli/auth/schannel.c
@@ -158,7 +158,8 @@ NTSTATUS schannel_check_packet(struct schannel_state *state,
        uint8_t seq_num[8];
        static const uint8_t netsec_sig[8] = NETSEC_SIGN_SIGNATURE;
 
-       if (sig->length != 32) {
+       /* w2k sends just 24 bytes and skip the confounder */
+       if (sig->length != 32 && sig->length != 24) {
                return NT_STATUS_ACCESS_DENIED;
        }