diff options
| author | Joseph Sutton <josephsutton@catalyst.net.nz> | 2022-12-12 10:50:01 +1300 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2023-02-08 00:03:39 +0000 |
| commit | 14d94460ca1ef22269373f36ec50df248aca9465 (patch) | |
| tree | ead5a685adf9569e531c69249539de8762673207 /source4/smb_server | |
| parent | 8aef16bbbc1e55f0a9f5a8ec87e5348688d93785 (diff) | |
| download | samba-14d94460ca1ef22269373f36ec50df248aca9465.tar.gz | |
auth: Pass through entire PAC flags value in auth_user_info
Besides the NETLOGON_GUEST bit indicating whether the user has been
authenticated, we now carry all of the other bits as well. This lets us
match Windows' behaviour of simply passing these bits through to an
updated PAC when processing a TGS-REQ.
Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'source4/smb_server')
| -rw-r--r-- | source4/smb_server/smb/sesssetup.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/source4/smb_server/smb/sesssetup.c b/source4/smb_server/smb/sesssetup.c index 07a7e7ea46c..f651c622443 100644 --- a/source4/smb_server/smb/sesssetup.c +++ b/source4/smb_server/smb/sesssetup.c @@ -111,7 +111,7 @@ static void sesssetup_old_send(struct tevent_req *subreq) if (!NT_STATUS_IS_OK(status)) goto failed; flags = AUTH_SESSION_INFO_DEFAULT_GROUPS; - if (user_info_dc->info->authenticated) { + if (!(user_info_dc->info->user_flags & NETLOGON_GUEST)) { flags |= AUTH_SESSION_INFO_AUTHENTICATED; } /* This references user_info_dc into session_info */ @@ -252,7 +252,7 @@ static void sesssetup_nt1_send(struct tevent_req *subreq) if (!NT_STATUS_IS_OK(status)) goto failed; flags = AUTH_SESSION_INFO_DEFAULT_GROUPS; - if (user_info_dc->info->authenticated) { + if (!(user_info_dc->info->user_flags & NETLOGON_GUEST)) { flags |= AUTH_SESSION_INFO_AUTHENTICATED; } /* This references user_info_dc into session_info */ |