Fix up the comments on security=share to explain we're

ignoring passwords.
Jeremy.

diff --git a/source/smbd/sesssetup.c b/source/smbd/sesssetup.c
index cf90c7183a2f740b105f6f30b12563f7f4a03033..e0739ef992a30cf9844481c3da10bc21dd4888d6 100644 (file)
--- a/source/smbd/sesssetup.c
+++ b/source/smbd/sesssetup.c
@@ -1534,6 +1534,10 @@ void reply_sesssetup_and_X(struct smb_request *req)
                        lm_resp = data_blob(p, passlen1);
                        nt_resp = data_blob(p+passlen1, passlen2);
                } else if (lp_security() != SEC_SHARE) {
+                       /*
+                        * In share level we should ignore any passwords, so
+                        * only read them if we're not.
+                        */
                        char *pass = NULL;
                        bool unic= smb_flag2 & FLAGS2_UNICODE_STRINGS;
 
@@ -1636,7 +1640,7 @@ void reply_sesssetup_and_X(struct smb_request *req)
        reload_services(True);
 
        if (lp_security() == SEC_SHARE) {
-               /* in share level we should ignore any passwords */
+               /* In share level we should ignore any passwords */
 
                data_blob_free(&lm_resp);
                data_blob_free(&nt_resp);