From: Stefan Metzmacher <metze@samba.org>
Date: Tue, 28 Jul 2009 06:17:25 +0000 (+0200)
Subject: s4:gensec/spnego: only generate the mechListMic when the server expects it
X-Git-Tag: tevent-0.9.8~640
X-Git-Url: http://git.samba.org/samba.git/?p=ira%2Fwip.git;a=commitdiff_plain;h=7204ea422bcffa0a7d26eb34c7adf9fc3a7e714c;ds=sidebyside

s4:gensec/spnego: only generate the mechListMic when the server expects it

This fixes the ntvfs.cifs tests.

metze
---

diff --git a/source4/auth/gensec/spnego.c b/source4/auth/gensec/spnego.c
index 331d0335243..b3567202c16 100644
--- a/source4/auth/gensec/spnego.c
+++ b/source4/auth/gensec/spnego.c
@@ -1029,7 +1029,8 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA
 						  spnego.negTokenTarg.responseToken, 
 						  &unwrapped_out);
 
-			if (NT_STATUS_IS_OK(nt_status)) {
+			if (NT_STATUS_IS_OK(nt_status)
+			    && spnego.negTokenTarg.negResult != SPNEGO_ACCEPT_COMPLETED) {
 				new_spnego = gensec_have_feature(spnego_state->sub_sec_security,
 								 GENSEC_FEATURE_NEW_SPNEGO);
 			}