summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2005-11-21 02:52:33 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 13:46:32 -0500
commitb495bb246c474cdac37e8176457c94262836e21f (patch)
tree39e58c16e1d5203e87a724635ab77470b48f988e
parent1b415f7b8e8d02f6b7978de730a16e258ec5d07d (diff)
downloadsamba-b495bb246c474cdac37e8176457c94262836e21f.tar.gz
samba-b495bb246c474cdac37e8176457c94262836e21f.tar.bz2
samba-b495bb246c474cdac37e8176457c94262836e21f.zip
r11816: this fixes some of the problems with the recent async rpc changes and
ncacn_ip_tcp/ncalrpc. The problem was that svn revision 11809 removed the logic that forced the CONNECT auth type for authenticated binds which don't have an explicit SIGN or SEAL flag set. (This used to be commit e7a1f11e8bcba3839f74c7303bd82533a6acfbcd)
-rw-r--r--source4/librpc/rpc/dcerpc_util.c12
1 files changed, 12 insertions, 0 deletions
diff --git a/source4/librpc/rpc/dcerpc_util.c b/source4/librpc/rpc/dcerpc_util.c
index 400a8b5e21..c3e928b6f1 100644
--- a/source4/librpc/rpc/dcerpc_util.c
+++ b/source4/librpc/rpc/dcerpc_util.c
@@ -975,6 +975,18 @@ NTSTATUS dcerpc_pipe_auth(struct dcerpc_pipe *p,
*/
uint8_t auth_type;
+
+ if ((p->conn->flags & (DCERPC_SIGN|DCERPC_SEAL)) == 0) {
+ /*
+ we are doing an authenticated connection,
+ but not using sign or seal. We must force
+ the CONNECT dcerpc auth type as a NONE auth
+ type doesn't allow authentication
+ information to be passed.
+ */
+ p->conn->flags |= DCERPC_CONNECT;
+ }
+
if (binding->flags & DCERPC_AUTH_SPNEGO) {
auth_type = DCERPC_AUTH_TYPE_SPNEGO;
} else if (binding->flags & DCERPC_AUTH_KRB5) {