With a windows 2008 client, even anonymous requires signing...

Andrew Bartlett

diff --git a/source/smb_server/smb/sesssetup.c b/source/smb_server/smb/sesssetup.c
index 2c4068bda5f0da029e5fb0c34b7b237914215d99..9d0d1533cea756f6071c10247e2985da0e87b186 100644 (file)
--- a/source/smb_server/smb/sesssetup.c
+++ b/source/smb_server/smb/sesssetup.c
@@ -188,11 +188,6 @@ static void sesssetup_nt1_send(struct auth_check_password_request *areq,
        req->session = smb_sess;
        sess->nt1.out.vuid = smb_sess->vuid;
 
-       if (!session_info->server_info->authenticated) {
-               /* don't try signing as anonymous */
-               goto done;
-       }
-
        if (!smbsrv_setup_signing(req->smb_conn, &session_info->session_key, &sess->nt1.in.password2)) {
                /* Already signing, or disabled */
                goto done;
@@ -326,7 +321,6 @@ static void sesssetup_spnego_send(struct gensec_update_request *greq, void *priv
 
        skey_status = gensec_session_key(smb_sess->gensec_ctx, &session_key);
        if (NT_STATUS_IS_OK(skey_status) &&
-           session_info->server_info->authenticated &&
            smbsrv_setup_signing(req->smb_conn, &session_key, NULL)) {
                /* Force check of the request packet, now we know the session key */
                smbsrv_signing_check_incoming(req);