From db5730cac4d6e0b64913bce21147352344077e2b Mon Sep 17 00:00:00 2001
From: Günther Deschner <gd@samba.org>
Date: Fri, 28 May 2010 14:21:15 +0200
Subject: s3-samr: give the system user a free pass for _samr_QueryUserInfo{2}
 level 18.

Guenther
---
 source3/rpc_server/srv_samr_nt.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'source3/rpc_server')

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index 0b8e7a521c..5b8a79fd87 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -2769,6 +2769,10 @@ static NTSTATUS get_user_info_18(pipes_struct *p,
 
 	ZERO_STRUCTP(r);
 
+	if (p->server_info->system) {
+		goto query;
+	}
+
 	if (p->auth.auth_type != PIPE_AUTH_TYPE_NTLMSSP || p->auth.auth_type != PIPE_AUTH_TYPE_SPNEGO_NTLMSSP) {
 		return NT_STATUS_ACCESS_DENIED;
 	}
@@ -2777,6 +2781,7 @@ static NTSTATUS get_user_info_18(pipes_struct *p,
 		return NT_STATUS_ACCESS_DENIED;
 	}
 
+ query:
 	/*
 	 * Do *NOT* do become_root()/unbecome_root() here ! JRA.
 	 */
-- 
cgit