s3: Fix "force group" with ntlmssp guest session setup
[samba.git] / source3 / auth / auth_ntlmssp.c
index 034d354a33712e3a9c665247ae7b5e823580776f..0e2c61af17b4b4f0eaa6607c6f5bd87dfa4b3f67 100644 (file)
@@ -126,12 +126,13 @@ static NTSTATUS auth_ntlmssp_check_password(struct ntlmssp_state *ntlmssp_state,
 
        auth_ntlmssp_state->server_info->nss_token |= username_was_mapped;
 
-       nt_status = create_local_token(auth_ntlmssp_state->server_info);
-
-       if (!NT_STATUS_IS_OK(nt_status)) {
-               DEBUG(10, ("create_local_token failed: %s\n",
-                       nt_errstr(nt_status)));
-               return nt_status;
+       if (auth_ntlmssp_state->server_info->ptok == NULL) {
+               nt_status = create_local_token(auth_ntlmssp_state->server_info);
+               if (!NT_STATUS_IS_OK(nt_status)) {
+                       DEBUG(10, ("create_local_token failed: %s\n",
+                                  nt_errstr(nt_status)));
+                       return nt_status;
+               }
        }
 
        if (auth_ntlmssp_state->server_info->user_session_key.length) {