sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-02 09:47:23 +03:00
Code

s4-rpc_server: Do not check association groups for NETLOGON

Browse Source 
If this RPC server is not going to use handles (actually a generic
flag) then do not check the assocation group provided.  This in turn
allows us to easily make NETLOGON run in multiple processes.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Andrew Bartlett 2016-11-14 10:11:05 +13:00
parent 6dc14b0a5d
commit b81cf02834
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
source4/rpc_server/dcerpc_server.c
View File

@ -816,6 +816,33 @@ static NTSTATUS dcesrv_bind(struct dcesrv_call_state *call)
call->conn->assoc_group = dcesrv_assoc_group_new(call->conn,
call->conn->dce_ctx);
}
/*
* The NETLOGON server does not use handles and so
* there is no need to support association groups, but
* we need to give back a number regardless.
*
* We have to do this when it is not run as a single process,
* because then it can't see the other valid association
* groups. We handle this genericly for all endpoints not
* running in single process mode.
*
* We know which endpoint we are on even before checking the
* iface UUID, so for simplicity we enforce the same policy
* for all interfaces on the endpoint.
*
* This means that where NETLOGON
* shares an endpoint (such as ncalrpc or of 'lsa over
* netlogon' is set) we will still check association groups.
*
*/
if (call->conn->assoc_group == NULL &&
!call->conn->endpoint->use_single_process) {
call->conn->assoc_group
= dcesrv_assoc_group_new(call->conn,
call->conn->dce_ctx);
}
if (call->conn->assoc_group == NULL) {
return dcesrv_bind_nak(call, 0);
}