summaryrefslogtreecommitdiff
path: root/auth/ntlmssp/gensec_ntlmssp_server.c
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2015-12-01 11:01:24 +0100
committerStefan Metzmacher <metze@samba.org>2016-04-12 19:25:22 +0200
commit2843f012b6bfb6d56e11b1723c0b35531ebf669f (patch)
tree68bbcbb1381d2e237f973f85d3c9213e3cb2a89d /auth/ntlmssp/gensec_ntlmssp_server.c
parent61ec7f069d777e2688657b490c07ce7499bd7221 (diff)
downloadsamba-2843f012b6bfb6d56e11b1723c0b35531ebf669f.tar.gz
CVE-2016-2110: auth/ntlmssp: maintain conf_flags and required_flags variables
We now give an error when required flags are missing. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11644 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'auth/ntlmssp/gensec_ntlmssp_server.c')
-rw-r--r--auth/ntlmssp/gensec_ntlmssp_server.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/auth/ntlmssp/gensec_ntlmssp_server.c b/auth/ntlmssp/gensec_ntlmssp_server.c
index 5a57413a4d2..ede6f465122 100644
--- a/auth/ntlmssp/gensec_ntlmssp_server.c
+++ b/auth/ntlmssp/gensec_ntlmssp_server.c
@@ -225,6 +225,9 @@ NTSTATUS gensec_ntlmssp_server_start(struct gensec_security *gensec_security)
ntlmssp_state->server.dns_domain = talloc_strdup(ntlmssp_state, dns_domain);
NT_STATUS_HAVE_NO_MEMORY(ntlmssp_state->server.dns_domain);
+ ntlmssp_state->neg_flags |= ntlmssp_state->required_flags;
+ ntlmssp_state->conf_flags = ntlmssp_state->neg_flags;
+
return NT_STATUS_OK;
}