From: Stefan Metzmacher <metze@samba.org>
Date: Mon, 6 Oct 2008 17:39:53 +0000 (+0200)
Subject: s4:rpc_server: tell the gensec layer that we want to do header signing
X-Git-Tag: samba-4.0.0alpha6~769^2~228^2~64^2~19
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9e492b1ba2ccf2d7c62ef7295b33260687e3aeae;p=thirdparty%2Fsamba.git

s4:rpc_server: tell the gensec layer that we want to do header signing

Note: header signing is still off by default, as the gensec backends
      don't support it together with seal yet.

metze
---

diff --git a/source4/rpc_server/dcesrv_auth.c b/source4/rpc_server/dcesrv_auth.c
index 52d5631cfd1..bef7e4be781 100644
--- a/source4/rpc_server/dcesrv_auth.c
+++ b/source4/rpc_server/dcesrv_auth.c
@@ -95,6 +95,10 @@ bool dcesrv_auth_bind(struct dcesrv_call_state *call)
 		return false;
 	}
 
+	if (call->conn->state_flags & DCESRV_CALL_STATE_FLAG_HEADER_SIGNING) {
+		gensec_want_feature(auth->gensec_security, GENSEC_FEATURE_SIGN_PKT_HEADER);
+	}
+
 	return true;
 }