sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-29 21:47:30 +03:00
Code

r6272: For 'programmed' use of an anonymous account, we should use

Browse Source 
cli_credentials_set_conf(), not cli_credentials_guess().

Also, clarify why for particular flags, we don't do a DCERPC-level
authentication.

Andrew Bartlett
This commit is contained in:
Andrew Bartlett 2005-04-10 10:13:57 +00:00 committed by Gerald (Jerry) Carter
parent 83c2eb806d
commit 838925761d
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
source/librpc/rpc/dcerpc_util.c
View File

@ -806,8 +806,8 @@ NTSTATUS dcerpc_epm_map_binding(TALLOC_CTX *mem_ctx, struct dcerpc_binding *bind
struct cli_credentials *anon_creds struct cli_credentials *anon_creds
= cli_credentials_init(mem_ctx); = cli_credentials_init(mem_ctx);
cli_credentials_set_conf(anon_creds);
cli_credentials_set_anonymous(anon_creds); cli_credentials_set_anonymous(anon_creds);
cli_credentials_guess(anon_creds);
/* First, check if there is a default endpoint specified in the IDL */ /* First, check if there is a default endpoint specified in the IDL */
@ -939,7 +939,14 @@ NTSTATUS dcerpc_pipe_auth(struct dcerpc_pipe *p,
} else if (!cli_credentials_is_anonymous(credentials) && } else if (!cli_credentials_is_anonymous(credentials) &&
!(binding->transport == NCACN_NP && !(binding->transport == NCACN_NP &&
!(binding->flags & DCERPC_SIGN) && !(binding->flags & DCERPC_SIGN) &&
!(binding->flags & DCERPC_SEAL))) { !(binding->flags & DCERPC_SEAL))) {
/* Perform an authenticated DCE-RPC bind, except where
* we ask for a connection on NCACN_NP, and that
* connection is not signed or sealed. For that case
* we rely on the already authenicated CIFS connection
*/
uint8_t auth_type; uint8_t auth_type;
if (binding->flags & DCERPC_AUTH_SPNEGO) { if (binding->flags & DCERPC_AUTH_SPNEGO) {
auth_type = DCERPC_AUTH_TYPE_SPNEGO; auth_type = DCERPC_AUTH_TYPE_SPNEGO;