diff options
| author | Stefan Metzmacher <metze@samba.org> | 2016-04-20 18:27:34 +0200 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2016-04-28 16:51:17 +0200 |
| commit | d667520568996471b55007a42b503edbabb1eee0 (patch) | |
| tree | 6c2fcee5a66cd5ac07ab7ef5019ec8ecb09c7cb8 /auth/ntlmssp/gensec_ntlmssp_server.c | |
| parent | 79a71545bfc87525c6ba6c8fe9fa7d8a9da33441 (diff) | |
| download | samba-d667520568996471b55007a42b503edbabb1eee0.tar.gz | |
auth/ntlmssp: do map to guest checking after the authentication
BUG: https://bugzilla.samba.org/show_bug.cgi?id=11847
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Diffstat (limited to 'auth/ntlmssp/gensec_ntlmssp_server.c')
| -rw-r--r-- | auth/ntlmssp/gensec_ntlmssp_server.c | 16 |
1 files changed, 1 insertions, 15 deletions
diff --git a/auth/ntlmssp/gensec_ntlmssp_server.c b/auth/ntlmssp/gensec_ntlmssp_server.c index ca19863eadd..120c6e03315 100644 --- a/auth/ntlmssp/gensec_ntlmssp_server.c +++ b/auth/ntlmssp/gensec_ntlmssp_server.c @@ -131,21 +131,7 @@ NTSTATUS gensec_ntlmssp_server_start(struct gensec_security *gensec_security) ntlmssp_state->allow_lm_key = true; } - if (lpcfg_map_to_guest(gensec_security->settings->lp_ctx) != NEVER_MAP_TO_GUEST) { - /* - * map to guest is not secure anyway, so - * try to make it work and don't try to - * negotiate new_spnego and MIC checking - */ - ntlmssp_state->force_old_spnego = true; - } - - if (role == ROLE_ACTIVE_DIRECTORY_DC) { - /* - * map to guest is not supported on an AD DC. - */ - ntlmssp_state->force_old_spnego = false; - } + ntlmssp_state->force_old_spnego = false; ntlmssp_state->neg_flags = NTLMSSP_NEGOTIATE_NTLM | NTLMSSP_NEGOTIATE_VERSION; |