summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Tridgell <tridge@samba.org>2010-11-27 23:47:03 +1100
committerAndrew Tridgell <tridge@samba.org>2010-11-28 00:16:38 +1100
commit8310375a048aeb754539421ac96291d13a4cd3d7 (patch)
tree2ea8d329c03a6722470faa9347a97fba48f68272
parenta589b9a03323ab5a87b85cb0bf54fcc485bb16d1 (diff)
downloadsamba-8310375a048aeb754539421ac96291d13a4cd3d7.tar.gz
samba-8310375a048aeb754539421ac96291d13a4cd3d7.tar.bz2
samba-8310375a048aeb754539421ac96291d13a4cd3d7.zip
s4-drs: allow DrsReplicaGetInfo as a DC
-rw-r--r--source4/rpc_server/drsuapi/dcesrv_drsuapi.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/rpc_server/drsuapi/dcesrv_drsuapi.c b/source4/rpc_server/drsuapi/dcesrv_drsuapi.c
index f4dad09335..6829416107 100644
--- a/source4/rpc_server/drsuapi/dcesrv_drsuapi.c
+++ b/source4/rpc_server/drsuapi/dcesrv_drsuapi.c
@@ -826,7 +826,7 @@ static WERROR dcesrv_drsuapi_DsReplicaGetInfo(struct dcesrv_call_state *dce_call
if (!lpcfg_parm_bool(dce_call->conn->dce_ctx->lp_ctx, NULL,
"drs", "disable_sec_check", false)) {
level = security_session_user_level(dce_call->conn->auth_state.session_info, NULL);
- if (level < SECURITY_ADMINISTRATOR) {
+ if (level < SECURITY_DOMAIN_CONTROLLER) {
DEBUG(1,(__location__ ": Administrator access required for DsReplicaGetInfo\n"));
security_token_debug(0, 2, dce_call->conn->auth_state.session_info->security_token);
return WERR_DS_DRA_ACCESS_DENIED;