svn commit: samba r5460 - in branches/SAMBA_3_0/source/rpc_server: .

[jmcd at samba.org]

Author: jmcd
Date: 2005-02-19 11:09:52 +0000 (Sat, 19 Feb 2005)
New Revision: 5460

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=5460

Log:
Fix "restrict anonymous = 1".  If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous
connection.  

Modified:
   branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c


Changeset:
Modified: branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c
===================================================================
--- branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c	2005-02-19 10:59:16 UTC (rev 5459)
+++ branches/SAMBA_3_0/source/rpc_server/srv_lsa_hnd.c	2005-02-19 11:09:52 UTC (rev 5460)
@@ -252,6 +252,10 @@
 	if (lp_restrict_anonymous() > 0) {
 		user_struct *user = get_valid_user_struct(p->vuid);
 
+		/* schannel, so we must be ok */
+		if (p->netsec_auth_validated)
+			return True;
+
 		if (!user) {
 			DEBUG(3, ("invalid vuid %d\n", p->vuid));
 			return False;