Ensure invalidate_vuid() deletes any ntlmssp state.

Jeremy.

diff --git a/source/smbd/password.c b/source/smbd/password.c
index 687b67950aa2295837083ca45676d2eaa9bba769..80eba562c54c77990bcdfbceb655d2ad6bc6520a 100644 (file)
--- a/source/smbd/password.c
+++ b/source/smbd/password.c
@@ -121,6 +121,10 @@ void invalidate_vuid(uint16 vuid)
 
        data_blob_free(&vuser->session_key);
 
+       if (vuser->auth_ntlmssp_state) {
+               auth_ntlmssp_end(&vuser->auth_ntlmssp_state);
+       }
+
        DLIST_REMOVE(validated_users, vuser);
 
        /* clear the vuid from the 'cache' on each connection, and