summaryrefslogtreecommitdiff
path: root/source3
diff options
context:
space:
mode:
authorJim McDonough <jmcd@samba.org>2005-02-19 11:09:52 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 10:55:41 -0500
commit96aaf64fa6279598b1a7ce67f02316c6cdd2a651 (patch)
tree819d19d12a6c7e218da77c5b68f6e28d1ac98a25 /source3
parent4e617c62c3998fb0a631b068ebdd159e6b6f286c (diff)
downloadsamba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.tar.gz
samba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.tar.bz2
samba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.zip
r5460: Fix "restrict anonymous = 1". If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous connection. (This used to be commit 469a649ad7271159960335419fd3ce2633cf2c8b)
Diffstat (limited to 'source3')
-rw-r--r--source3/rpc_server/srv_lsa_hnd.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/source3/rpc_server/srv_lsa_hnd.c b/source3/rpc_server/srv_lsa_hnd.c
index 0f9f239a02..68072b528a 100644
--- a/source3/rpc_server/srv_lsa_hnd.c
+++ b/source3/rpc_server/srv_lsa_hnd.c
@@ -252,6 +252,10 @@ BOOL pipe_access_check(pipes_struct *p)
if (lp_restrict_anonymous() > 0) {
user_struct *user = get_valid_user_struct(p->vuid);
+ /* schannel, so we must be ok */
+ if (p->netsec_auth_validated)
+ return True;
+
if (!user) {
DEBUG(3, ("invalid vuid %d\n", p->vuid));
return False;