libsmb/clientgen.c

[Jeremy Allison]

Luke Kenneth Casson Leighton wrote:
> 
> there is a bug to fix in libsmb/clientgen.c cli_session_setup() it cannot
> be used to send cleartext passwords to systems with user level security
> set.
> 
> are there any objections to fixing this issue by moving the password
> encryption routines outside of cli_session_setup() and then replacing the
> two remaining call-sets (in client/client.c:do_connect()) and
> smbwrapper/smbw.c to cli_session_setup(), cli_tcon_X() etc with calls to
> cli_establish_connection()?

Only if you don't mind that I'll put the old code back
when I do the merge :-) :-).

Jeremy.

-- 
--------------------------------------------------------
Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.
--------------------------------------------------------