From 53f602c3744c0952f3385a39d5984d5a47b9905c Mon Sep 17 00:00:00 2001
From: Kai Blin <kai@samba.org>
Date: Wed, 5 Sep 2012 08:34:49 +0200
Subject: s4 dns: Verify incoming TSIG signatures

---
 source4/dns_server/dns_server.c | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'source4/dns_server/dns_server.c')

diff --git a/source4/dns_server/dns_server.c b/source4/dns_server/dns_server.c
index 795b7198aa..d9851b1566 100644
--- a/source4/dns_server/dns_server.c
+++ b/source4/dns_server/dns_server.c
@@ -145,6 +145,14 @@ static struct tevent_req *dns_process_send(TALLOC_CTX *mem_ctx,
 		NDR_PRINT_DEBUG(dns_name_packet, &state->in_packet);
 	}
 
+	ret = dns_verify_tsig(dns, state, &state->state, &state->in_packet, in);
+	if (!W_ERROR_IS_OK(ret)) {
+		DEBUG(0, ("Bailing out early!\n"));
+		state->dns_err = werr_to_dns_err(ret);
+		tevent_req_done(req);
+		return tevent_req_post(req, ev);
+	}
+
 	state->state.flags = state->in_packet.operation;
 	state->state.flags |= DNS_FLAG_REPLY;
 
-- 
cgit