From 3e084ea6ceb82b61c24ce7260404027a4428b9d6 Mon Sep 17 00:00:00 2001 From: =?utf8?q?G=C3=BCnther=20Deschner?= Date: Mon, 26 Sep 2016 19:21:05 +0200 Subject: [PATCH] s3-rpc_server: enforce packet level authentication for iremotewinspool server Guenther Signed-off-by: Guenther Deschner Reviewed-by: Andreas Schneider --- source3/rpc_server/srv_pipe.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/source3/rpc_server/srv_pipe.c b/source3/rpc_server/srv_pipe.c index 3af0daf410e..bf8988b2a76 100644 --- a/source3/rpc_server/srv_pipe.c +++ b/source3/rpc_server/srv_pipe.c @@ -50,6 +50,7 @@ #include "../librpc/gen_ndr/ndr_netlogon.h" #include "../librpc/gen_ndr/ndr_epmapper.h" #include "../librpc/gen_ndr/ndr_echo.h" +#include "../librpc/gen_ndr/ndr_winspool.h" #undef DBGC_CLASS #define DBGC_CLASS DBGC_RPC_SRV @@ -459,6 +460,11 @@ static bool check_bind_req(struct pipes_struct *p, "allow dcerpc auth level connect", interface_name, context_fns->allow_connect); + ok = ndr_syntax_id_equal(abstract, &ndr_table_iremotewinspool.syntax_id); + if (ok) { + context_fns->min_auth_level = DCERPC_AUTH_LEVEL_PACKET; + } + /* add to the list of open contexts */ DLIST_ADD( p->contexts, context_fns ); -- 2.47.2