summaryrefslogtreecommitdiff
path: root/source4
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2012-12-11 14:43:07 +0100
committerStefan Metzmacher <metze@samba.org>2012-12-12 11:29:33 +0100
commit4fd7aaf2b148fff7d5efc15e9f1923bf56b5b54a (patch)
treef2575b5323fce1cdbde53f22a32b3ee617db4a6f /source4
parentc9055a0be444260ddbf44eb13007399bf7dff5e1 (diff)
downloadsamba-4fd7aaf2b148fff7d5efc15e9f1923bf56b5b54a.tar.gz
samba-4fd7aaf2b148fff7d5efc15e9f1923bf56b5b54a.tar.bz2
samba-4fd7aaf2b148fff7d5efc15e9f1923bf56b5b54a.zip
s4-rpc_server: limit allowed transports for samr_ValidatePassword().
Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4')
-rw-r--r--source4/rpc_server/samr/dcesrv_samr.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/source4/rpc_server/samr/dcesrv_samr.c b/source4/rpc_server/samr/dcesrv_samr.c
index d987fbaaef..3826075ebc 100644
--- a/source4/rpc_server/samr/dcesrv_samr.c
+++ b/source4/rpc_server/samr/dcesrv_samr.c
@@ -4290,6 +4290,11 @@ static NTSTATUS dcesrv_samr_ValidatePassword(struct dcesrv_call_state *dce_call,
DATA_BLOB password;
enum samr_ValidationStatus res;
NTSTATUS status;
+ enum dcerpc_transport_t transport = dce_call->conn->endpoint->ep_description->transport;
+
+ if (transport != NCACN_IP_TCP && transport != NCALRPC) {
+ DCESRV_FAULT(DCERPC_FAULT_ACCESS_DENIED);
+ }
(*r->out.rep) = talloc_zero(mem_ctx, union samr_ValidatePasswordRep);