Attachment 6676 Details for Bug 8212 – patch to fix sec=ntlmsspi against Samba server when signing is mandatory

[patch] patch to fix sec=ntlmsspi against Samba server when signing is mandatory

ntlmsspi.1.patch (text/plain), 1.12 KB, created by shirishpargaonkar@gmail.com on 2011-07-08 21:11:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: shirishpargaonkar@gmail.com

Created: 2011-07-08 21:11:43 UTC

Size: 1.12 KB

patch

obsolete

>diff --git a/fs/cifs/sess.c b/fs/cifs/sess.c
>index f6728eb..0c2de3d 100644
>--- a/fs/cifs/sess.c
>+++ b/fs/cifs/sess.c
>@@ -441,8 +441,7 @@ static void build_ntlmssp_negotiate_blob(unsigned char *pbuffer,
> 			(SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED)) {
> 		flags |= NTLMSSP_NEGOTIATE_SIGN;
> 		if (!ses->server->session_estab)
>-			flags |= NTLMSSP_NEGOTIATE_KEY_XCH |
>-				NTLMSSP_NEGOTIATE_EXTENDED_SEC;
>+			flags |= NTLMSSP_NEGOTIATE_KEY_XCH;
> 	}
> 
> 	sec_blob->NegotiateFlags = cpu_to_le32(flags);
>@@ -478,10 +477,11 @@ static int build_ntlmssp_auth_blob(unsigned char *pbuffer,
> 		NTLMSSP_NEGOTIATE_128 | NTLMSSP_NEGOTIATE_UNICODE |
> 		NTLMSSP_NEGOTIATE_NTLM | NTLMSSP_NEGOTIATE_EXTENDED_SEC;
> 	if (ses->server->secMode &
>-	   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
>+	   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED)) {
> 		flags |= NTLMSSP_NEGOTIATE_SIGN;
>-	if (ses->server->secMode & SECMODE_SIGN_REQUIRED)
>-		flags |= NTLMSSP_NEGOTIATE_ALWAYS_SIGN;
>+		if (!ses->server->session_estab)
>+			flags |= NTLMSSP_NEGOTIATE_KEY_XCH;
>+	}
> 
> 	tmp = pbuffer + sizeof(AUTHENTICATE_MESSAGE);
> 	sec_blob->NegotiateFlags = cpu_to_le32(flags);

Actions: View

Attachments on bug 8212: 6542 | 6555 | 6667 | 6668 | 6676