Start the packet signing engine in the kerberos case in the same place
authorJeremy Allison <jra@samba.org>
Fri, 25 Jul 2003 23:43:22 +0000 (23:43 +0000)
committerJeremy Allison <jra@samba.org>
Fri, 25 Jul 2003 23:43:22 +0000 (23:43 +0000)
as the ntlmssp case.
Jeremy.

source/smbd/sesssetup.c

index bc3ac6ac6461623e4ab33080d95e2c763e69de39..ccd7214251f8d41f16ec1f661c30b68940f7eacf 100644 (file)
@@ -252,8 +252,14 @@ static int reply_spnego_kerberos(connection_struct *conn,
                
                SSVAL(outbuf, smb_uid, sess_vuid);
 
-               if (!server_info->guest && !srv_check_sign_mac(inbuf)) {
-                       exit_server("reply_spnego_kerberos: bad smb signature");
+               if (!server_info->guest) {
+                       /* We need to start the signing engine
+                        * here but a W2K client sends the old
+                        * "BSRSPYL " signature instead of the
+                        * correct one. Subsequent packets will
+                        * be correct.
+                        */
+                       srv_check_sign_mac(inbuf);
                }
        }
 
@@ -327,7 +333,6 @@ static BOOL reply_spnego_ntlmssp(connection_struct *conn, char *inbuf, char *out
                                 */
                                srv_check_sign_mac(inbuf);
                        }
-
                }
        }