diff options
| author | Stefan Metzmacher <metze@samba.org> | 2012-01-14 11:28:28 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2012-01-18 16:23:25 +0100 |
| commit | 545c1ad1b939015b618a1a979c435dbba70845bd (patch) | |
| tree | 8aadf626475d519bea36e22b1b9a2809fb051620 /source3/librpc/crypto | |
| parent | c5864deadcd24dcf1f9a99607deacc635e091fd4 (diff) | |
| download | samba-545c1ad1b939015b618a1a979c435dbba70845bd.tar.gz samba-545c1ad1b939015b618a1a979c435dbba70845bd.tar.bz2 samba-545c1ad1b939015b618a1a979c435dbba70845bd.zip | |
s3-gse: the server should not check for GSS_C_MUTUAL_FLAG
It up to the client to ask for GSS_C_MUTUAL_FLAG,
except for the dcerpc case, where the server is stricter.
metze
Diffstat (limited to 'source3/librpc/crypto')
| -rw-r--r-- | source3/librpc/crypto/gse.c | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/source3/librpc/crypto/gse.c b/source3/librpc/crypto/gse.c index 5a5492f80a..c7ce38e14f 100644 --- a/source3/librpc/crypto/gse.c +++ b/source3/librpc/crypto/gse.c @@ -527,12 +527,6 @@ static NTSTATUS gse_verify_server_auth_flags(struct gse_context *gse_ctx) } /* GSS_C_MUTUAL_FLAG */ - if (gse_ctx->gss_want_flags & GSS_C_MUTUAL_FLAG) { - if (!(gse_ctx->gss_got_flags & GSS_C_MUTUAL_FLAG)) { - return NT_STATUS_ACCESS_DENIED; - } - } - /* GSS_C_DELEG_FLAG */ /* GSS_C_DELEG_POLICY_FLAG */ /* GSS_C_REPLAY_FLAG */ |