diff options
| author | Jim McDonough <jmcd@samba.org> | 2005-02-19 11:09:52 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 10:55:41 -0500 |
| commit | 96aaf64fa6279598b1a7ce67f02316c6cdd2a651 (patch) | |
| tree | 819d19d12a6c7e218da77c5b68f6e28d1ac98a25 /source3 | |
| parent | 4e617c62c3998fb0a631b068ebdd159e6b6f286c (diff) | |
| download | samba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.tar.gz samba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.tar.bz2 samba-96aaf64fa6279598b1a7ce67f02316c6cdd2a651.zip | |
r5460: Fix "restrict anonymous = 1". If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous
connection.
(This used to be commit 469a649ad7271159960335419fd3ce2633cf2c8b)
Diffstat (limited to 'source3')
| -rw-r--r-- | source3/rpc_server/srv_lsa_hnd.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/source3/rpc_server/srv_lsa_hnd.c b/source3/rpc_server/srv_lsa_hnd.c index 0f9f239a02..68072b528a 100644 --- a/source3/rpc_server/srv_lsa_hnd.c +++ b/source3/rpc_server/srv_lsa_hnd.c @@ -252,6 +252,10 @@ BOOL pipe_access_check(pipes_struct *p) if (lp_restrict_anonymous() > 0) { user_struct *user = get_valid_user_struct(p->vuid); + /* schannel, so we must be ok */ + if (p->netsec_auth_validated) + return True; + if (!user) { DEBUG(3, ("invalid vuid %d\n", p->vuid)); return False; |