[SCM] Samba Shared Repository - branch v4-0-test updated - release-4-0-0alpha5-238-gb345c9c

[Andrew Bartlett]

The branch, v4-0-test has been updated
       via  b345c9cf535af35c83da040ac965d9690dc802fe (commit)
       via  580cce9de38ddd9d59b272b58caadce528321d09 (commit)
      from  d0a128f35b259d4891edc68fc24aa04a6da7aab7 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v4-0-test


- Log -----------------------------------------------------------------
commit b345c9cf535af35c83da040ac965d9690dc802fe
Author: Andrew Bartlett <abartlet at samba.org>
Date:   Fri Aug 8 14:05:16 2008 +1000

    Always set a session key, even for the 'no password' case.
    
    This is for bug 5664 reported by Tom <hto at arcor.de>.
    
    Andrew Bartlett

commit 580cce9de38ddd9d59b272b58caadce528321d09
Author: Andrew Bartlett <abartlet at samba.org>
Date:   Fri Aug 8 14:04:08 2008 +1000

    Clarify comment

-----------------------------------------------------------------------

Summary of changes:
 source/auth/ntlm/auth_sam.c |    2 ++
 source/auth/session.c       |    4 ++--
 2 files changed, 4 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/auth/ntlm/auth_sam.c b/source/auth/ntlm/auth_sam.c
index 2c13cd9..1b8233b 100644
--- a/source/auth/ntlm/auth_sam.c
+++ b/source/auth/ntlm/auth_sam.c
@@ -156,6 +156,8 @@ static NTSTATUS authsam_password_ok(struct auth_context *auth_context,
 		if (lp_null_passwords(auth_context->lp_ctx)) {
 			DEBUG(3,("Account for user '%s' has no password and null passwords are allowed.\n", 
 				 user_info->mapped.account_name));
+			*lm_sess_key = data_blob(NULL, 0);
+			*user_sess_key = data_blob(NULL, 0);
 			return NT_STATUS_OK;
 		} else {
 			DEBUG(3,("Account for user '%s' has no password and null passwords are NOT allowed.\n", 
diff --git a/source/auth/session.c b/source/auth/session.c
index 8f5e8d6..b254ee5 100644
--- a/source/auth/session.c
+++ b/source/auth/session.c
@@ -98,14 +98,14 @@ _PUBLIC_ NTSTATUS auth_anonymous_server_info(TALLOC_CTX *mem_ctx,
 	server_info->n_domain_groups = 0;
 	server_info->domain_groups = NULL;
 
-	/* annoying, but the Anonymous really does have a session key, 
-	   and it is all zeros! */
+	/* annoying, but the Anonymous really does have a session key... */
 	server_info->user_session_key = data_blob_talloc(server_info, NULL, 16);
 	NT_STATUS_HAVE_NO_MEMORY(server_info->user_session_key.data);
 
 	server_info->lm_session_key = data_blob_talloc(server_info, NULL, 16);
 	NT_STATUS_HAVE_NO_MEMORY(server_info->lm_session_key.data);
 
+	/*  and it is all zeros! */
 	data_blob_clear(&server_info->user_session_key);
 	data_blob_clear(&server_info->lm_session_key);
 


-- 
Samba Shared Repository