sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
Code

auth/spnego: always announce GENSEC_FEATURE_SIGN_PKT_HEADER support.

Browse Source 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Stefan Metzmacher 2017-05-12 11:05:15 +02:00 committed by Andrew Bartlett
parent 0ff6a1ae1f
commit 8ddf3166d4
1 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
auth/gensec/spnego.c
View File

@ -1632,6 +1632,20 @@ static bool gensec_spnego_have_feature(struct gensec_security *gensec_security,
uint32_t feature)
{
struct spnego_state *spnego_state = (struct spnego_state *)gensec_security->private_data;
if (feature & GENSEC_FEATURE_SIGN_PKT_HEADER) {
/*
* All mechs with sub (child) mechs need to provide DCERPC
* header signing! This is required because the negotiation
* of header signing is done before the authentication
* is completed.
*
* Currently all our backends support DCERPC with:
* GENSEC_FEATURE_SIGN_PKT_HEADER.
*/
return true;
}
if (!spnego_state->sub_sec_security) {
return false;
}