Commit 345a226f authored May 03, 2016 by Stefan Metzmacher Committed by Sasha Levin Jun 06, 2016

fs/cifs: correctly to anonymous authentication for the LANMAN authentication

[ Upstream commit fa8f3a354bb775ec586e4475bcb07f7dece97e0c ]

Only server which map unknown users to guest will allow
access using a non-null LMChallengeResponse.

For Samba it's the "map to guest = bad user" option.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11913



Signed-off-by: Stefan Metzmacher <metze@samba.org>
CC: Stable <stable@vger.kernel.org>
Signed-off-by: Steve French <smfrench@gmail.com>
Signed-off-by: Sasha Levin <sasha.levin@oracle.com>

parent b9cdb796

fs/cifs/sess.c

+16 −12

Original line number	Diff line number	Diff line
		@@ -678,6 +678,7 @@ sess_auth_lanman(struct sess_data *sess_data)

		pSMB->req.hdr.Flags2 &= ~SMBFLG2_UNICODE;

		if (ses->user_name != NULL) {
		/* no capabilities flags in old lanman negotiation */
		pSMB->old_req.PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);

		@@ -692,6 +693,9 @@ sess_auth_lanman(struct sess_data *sess_data)

		memcpy(bcc_ptr, (char *)lnm_session_key, CIFS_AUTH_RESP_SIZE);
		bcc_ptr += CIFS_AUTH_RESP_SIZE;
		} else {
		pSMB->old_req.PasswordLength = 0;
		}

		/*
		* can not sign if LANMAN negotiated so no need