1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00

s4:librpc: ask for GENSEC_FEATURE_SIGN_PKT_HEADER after the gensec_update() dance

Most features should be added before the update() dance, while
GENSEC_FEATURE_SIGN_PKT_HEADER needs to be after the dance on the client
side.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Stefan Metzmacher 2017-05-14 00:28:50 +02:00 committed by Andrew Bartlett
parent e217c2e30a
commit 278f220c7e

View File

@ -205,6 +205,13 @@ static void bind_auth_next_step(struct composite_context *c)
if (!composite_is_ok(c)) return;
if (!more_processing) {
if (state->pipe->conn->flags & DCERPC_HEADER_SIGNING) {
gensec_want_feature(sec->generic_state,
GENSEC_FEATURE_SIGN_PKT_HEADER);
}
}
if (state->out_auth_info.credentials.length == 0) {
composite_done(c);
return;
@ -271,10 +278,6 @@ static void bind_auth_recv_bindreply(struct tevent_req *subreq)
TALLOC_FREE(subreq);
if (!composite_is_ok(c)) return;
if (state->pipe->conn->flags & DCERPC_HEADER_SIGNING) {
gensec_want_feature(sec->generic_state, GENSEC_FEATURE_SIGN_PKT_HEADER);
}
if (!state->more_processing) {
/* The first gensec_update has not requested a second run, so
* we're done here. */