ABOUT TIME!!!!!!!!

damn, this one is bad.

started, at least two days ago, to add an authentication mechanism to
the smbd<->msrpc redirector/relay, such that sufficient unix / nt
information could be transferred across the unix socket to do a
become_user() on the other side of the socket.

it is necessary that the msrpc daemon inherit the same unix and nt
credentials as the smbd process from which it was spawned, until
such time as the msrpc daemon receives an authentication request
of its own, whereupon the msrpc daemon is responsible for authenticating
the new credentials and doing yet another become_user() etc sequence.
(This used to be commit 30c7fdd6ef10ecd35594311c1b250b95ff895489)

1 files changed, 5 insertions, 1 deletions

diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c
index 04fa0955ea..ca87cafcf7 100644
--- a/source3/rpc_server/srv_pipe.c
+++ b/source3/rpc_server/srv_pipe.c
@@ -482,7 +482,11 @@ void add_msrpc_command_processor(char* pipe_name,
 				char* process_name,
 				BOOL (*fn) (pipes_struct *, prs_struct *))
 {
-	struct api_cmd cmd = { pipe_name, process_name, fn };
+	struct api_cmd cmd;
+	cmd.pipe_clnt_name = pipe_name;
+	cmd.pipe_srv_name = process_name;
+	cmd.fn = fn;
+
 	add_api_cmd_to_array(&num_cmds, &api_fd_commands, &cmd);
 }