From: Günther Deschner <gd@samba.org>
Date: Mon, 26 Sep 2016 17:21:05 +0000 (+0200)
Subject: s3-rpc_server: enforce packet level authentication for iremotewinspool server
X-Git-Tag: talloc-2.1.9~469
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3e084ea6ceb82b61c24ce7260404027a4428b9d6;p=thirdparty%2Fsamba.git

s3-rpc_server: enforce packet level authentication for iremotewinspool server

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c
index 3af0daf410e..bf8988b2a76 100644
--- a/source3/rpc_server/srv_pipe.c
+++ b/source3/rpc_server/srv_pipe.c
@@ -50,6 +50,7 @@
 #include "../librpc/gen_ndr/ndr_netlogon.h"
 #include "../librpc/gen_ndr/ndr_epmapper.h"
 #include "../librpc/gen_ndr/ndr_echo.h"
+#include "../librpc/gen_ndr/ndr_winspool.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
@@ -459,6 +460,11 @@ static bool check_bind_req(struct pipes_struct *p,
 		"allow dcerpc auth level connect",
 		interface_name, context_fns->allow_connect);
 
+	ok = ndr_syntax_id_equal(abstract, &ndr_table_iremotewinspool.syntax_id);
+	if (ok) {
+		context_fns->min_auth_level = DCERPC_AUTH_LEVEL_PACKET;
+	}
+
 	/* add to the list of open contexts */
 
 	DLIST_ADD( p->contexts, context_fns );