svn commit: samba r5940 - in branches/SAMBA_4_0/source/libcli/auth: .

[metze at samba.org]

Author: metze
Date: 2005-03-22 06:58:27 +0000 (Tue, 22 Mar 2005)
New Revision: 5940

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=5940

Log:
fix schannel against w2k, it skips the confounder in the signature (24 bytes) for singed packets
but it accepts 32 bytes from the client.

(w2k3 accept it the otherway arround too)

metze

Modified:
   branches/SAMBA_4_0/source/libcli/auth/schannel.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/auth/schannel.c
===================================================================
--- branches/SAMBA_4_0/source/libcli/auth/schannel.c	2005-03-22 06:00:51 UTC (rev 5939)
+++ branches/SAMBA_4_0/source/libcli/auth/schannel.c	2005-03-22 06:58:27 UTC (rev 5940)
@@ -158,7 +158,8 @@
 	uint8_t seq_num[8];
 	static const uint8_t netsec_sig[8] = NETSEC_SIGN_SIGNATURE;
 
-	if (sig->length != 32) {
+	/* w2k sends just 24 bytes and skip the confounder */
+	if (sig->length != 32 && sig->length != 24) {
 		return NT_STATUS_ACCESS_DENIED;
 	}