Changeset 862 for trunk/server/source3/auth/auth_winbind.c

Timestamp:

May 13, 2014, 11:39:04 AM (11 years ago)

Author:

Silvan Scherrer

Message:

Samba Server: update trunk to 3.6.23

Location:

trunk/server

Files:

• . (modified) (1 prop)
• source3/auth/auth_winbind.c (modified) (1 diff)

trunk/server/source3/auth/auth_winbind.c

@@ -63 +63 @@
 
         /* Send off request */
-
         params.account_name     = user_info->client.account_name;
-        params.domain_name      = user_info->mapped.domain_name;
+        /*
+         * We need to send the domain name from the client to the DC. With
+         * NTLMv2 the domain name is part of the hashed second challenge,
+         * if we change the domain name, the DC will fail to verify the
+         * challenge cause we changed the domain name, this is like a
+         * man in the middle attack.
+         */
+        params.domain_name      = user_info->client.domain_name;
         params.workstation_name = user_info->workstation_name;