s3:smb2_server: don't rely on the SMB2_HDR_FLAG_SIGNED if signing is required

Windows (at least the test suites) may skip the SMB2_HDR_FLAG_SIGNED
in a reauth session setup, but still provide a valid signature.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 4a7b792bc6d463a3aa4e1150a271ed6b929276cc)

diff --git a/source3/smbd/smb2_server.c b/source3/smbd/smb2_server.c
index 1e4bedae39cea7cdbaecf11245ef4a03034dccd6..9c4e18713d8251219d8224ac0ec6768d12973308 100644 (file)
--- a/source3/smbd/smb2_server.c
+++ b/source3/smbd/smb2_server.c
@@ -1970,7 +1970,7 @@ NTSTATUS smbd_smb2_request_dispatch(struct smbd_smb2_request *req)
 
        if (req->do_encryption) {
                signing_required = false;
-       } else if (flags & SMB2_HDR_FLAG_SIGNED) {
+       } else if (signing_required || (flags & SMB2_HDR_FLAG_SIGNED)) {
                DATA_BLOB signing_key;
 
                if (x == NULL) {