diff options
| author | Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | 2009-09-19 15:08:19 -0700 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2009-09-19 15:39:40 -0700 |
| commit | 6e56261eb7d417b488da2d3b051fb8284abb3fbd (patch) | |
| tree | 1321e372a625c703b02258e10299d856f4dfb329 /source4/rpc_server/drsuapi/addentry.c | |
| parent | 2b5d1dfe6be0ba586d4af54f4b5ccd478ff4db77 (diff) | |
| download | samba-6e56261eb7d417b488da2d3b051fb8284abb3fbd.tar.gz samba-6e56261eb7d417b488da2d3b051fb8284abb3fbd.tar.bz2 samba-6e56261eb7d417b488da2d3b051fb8284abb3fbd.zip | |
Add drs_security_level_check for dcesrv calls security checks
There is also an option to disable the security check
by specifying in the smb.conf file:
drs:disable_sec_check = true
Diffstat (limited to 'source4/rpc_server/drsuapi/addentry.c')
| -rw-r--r-- | source4/rpc_server/drsuapi/addentry.c | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/source4/rpc_server/drsuapi/addentry.c b/source4/rpc_server/drsuapi/addentry.c index 25f2aaaa29..74de772f7a 100644 --- a/source4/rpc_server/drsuapi/addentry.c +++ b/source4/rpc_server/drsuapi/addentry.c @@ -151,10 +151,9 @@ WERROR dcesrv_drsuapi_DsAddEntry(struct dcesrv_call_state *dce_call, TALLOC_CTX DCESRV_PULL_HANDLE_WERR(h, r->in.bind_handle, DRSUAPI_BIND_HANDLE); b_state = h->data; - if (security_session_user_level(dce_call->conn->auth_state.session_info) < - SECURITY_DOMAIN_CONTROLLER) { - DEBUG(0,("DsAddEntry refused for security token\n")); - return WERR_DS_DRA_ACCESS_DENIED; + status = drs_security_level_check(dce_call, "DsAddEntry"); + if (!W_ERROR_IS_OK(status)) { + return status; } switch (r->in.level) { |