Author: jmcd
Date: 2005-02-19 11:09:52 +0000 (Sat, 19 Feb 2005)
New Revision: 5460

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=5460

Log:
Fix "restrict anonymous = 1".  If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous
connection.  

Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c
===================================================================
--- branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c  2005-02-19 10:59:16 UTC 
(rev 5459)
+++ branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c  2005-02-19 11:09:52 UTC 
(rev 5460)
@@ -252,6 +252,10 @@
        if (lp_restrict_anonymous() > 0) {
                user_struct *user = get_valid_user_struct(p->vuid);
 
+               /* schannel, so we must be ok */
+               if (p->netsec_auth_validated)
+                       return True;
+
                if (!user) {
                        DEBUG(3, ("invalid vuid %d\n", p->vuid));
                        return False;

Reply via email to