From: Jim McDonough <jmcd@samba.org>
Date: Sat, 19 Feb 2005 11:09:52 +0000 (+0000)
Subject: r5460: Fix "restrict anonymous = 1".  If we have schannel connection, we must be
X-Git-Tag: samba-misc-tags/initial-v3-0-unstable~5250
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=469a649ad7271159960335419fd3ce2633cf2c8b;p=thirdparty%2Fsamba.git

r5460: Fix "restrict anonymous = 1".  If we have schannel connection, we must be
validated with a user, so allow it even if pipe itself had an anonymous
connection.
---

diff --git a/source/rpc_server/srv_lsa_hnd.c b/source/rpc_server/srv_lsa_hnd.c
index 0f9f239a029..68072b528aa 100644
--- a/source/rpc_server/srv_lsa_hnd.c
+++ b/source/rpc_server/srv_lsa_hnd.c
@@ -252,6 +252,10 @@ BOOL pipe_access_check(pipes_struct *p)
 	if (lp_restrict_anonymous() > 0) {
 		user_struct *user = get_valid_user_struct(p->vuid);
 
+		/* schannel, so we must be ok */
+		if (p->netsec_auth_validated)
+			return True;
+
 		if (!user) {
 			DEBUG(3, ("invalid vuid %d\n", p->vuid));
 			return False;