Jeremy Allison jallison at
Wed Jan 27 19:49:26 GMT 1999

Luke Kenneth Casson Leighton wrote:
> there is a bug to fix in libsmb/clientgen.c cli_session_setup() it cannot
> be used to send cleartext passwords to systems with user level security
> set.
> are there any objections to fixing this issue by moving the password
> encryption routines outside of cli_session_setup() and then replacing the
> two remaining call-sets (in client/client.c:do_connect()) and
> smbwrapper/smbw.c to cli_session_setup(), cli_tcon_X() etc with calls to
> cli_establish_connection()?

Only if you don't mind that I'll put the old code back
when I do the merge :-) :-).


Buying an operating system without source is like buying
a self-assembly Space Shuttle with no instructions.

More information about the samba-technical mailing list