From 3e6daa30f5594c25da190773be79003eef9b157a Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 18 Jul 2017 11:42:43 +0200 Subject: [PATCH] auth/spnego: generate a valid packet if gensec_spnego_client_negTokenTarg() gives MORE_PROCESSING_REQUIRED If we wait for the mechListMIC from the server we should send a valid paket instead of an empty blob. Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider --- auth/gensec/spnego.c | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/auth/gensec/spnego.c b/auth/gensec/spnego.c index 22abad342b1..5eb75ad47aa 100644 --- a/auth/gensec/spnego.c +++ b/auth/gensec/spnego.c @@ -829,10 +829,6 @@ static NTSTATUS gensec_spnego_client_negTokenTarg(struct gensec_security *gensec spnego_state->needs_mic_sign = false; } - if (spnego_state->needs_mic_check) { - status = NT_STATUS_MORE_PROCESSING_REQUIRED; - } - client_response: if (GENSEC_UPDATE_IS_NTERROR(status)) { DBG_WARNING("SPNEGO(%s) login failed: %s\n", @@ -856,8 +852,10 @@ static NTSTATUS gensec_spnego_client_negTokenTarg(struct gensec_security *gensec return NT_STATUS_INVALID_PARAMETER; } - spnego_state->state_position = SPNEGO_DONE; - return status; + if (!spnego_state->needs_mic_check) { + spnego_state->state_position = SPNEGO_DONE; + return NT_STATUS_OK; + } } /* compose reply */ -- 2.34.1