From: Jeremy Allison <jra@samba.org>
Date: Thu, 19 Apr 2007 00:44:39 +0000 (+0000)
Subject: r22352: Wow - working gss SMB sealing !
X-Git-Tag: samba-misc-tags/initial-v3-0-unstable~667
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=abcb2a4b0709ef84c50c1d9a85191dc3866cd138;p=thirdparty%2Fsamba.git

r22352: Wow - working gss SMB sealing !
Jeremy.
---

diff --git a/source/smbd/seal.c b/source/smbd/seal.c
index 7dd6e3d7bbf..07ef186e2ed 100644
--- a/source/smbd/seal.c
+++ b/source/smbd/seal.c
@@ -365,6 +365,8 @@ static NTSTATUS srv_enc_spnego_gss_negotiate(unsigned char **ppdata, size_t *p_d
 	out_buf.value = NULL;
 	out_buf.length = 0;
 
+	become_root();
+
 	ret = gss_accept_sec_context(&min,
 				&gss_state->gss_ctx,
 				gss_state->creds,
@@ -376,6 +378,7 @@ static NTSTATUS srv_enc_spnego_gss_negotiate(unsigned char **ppdata, size_t *p_d
 				&flags,
 				NULL,		/* Ingore time. */
 				NULL);		/* Ignore delegated creds. */
+	unbecome_root();
 
 	status = gss_err_to_ntstatus(ret, min);
 	if (ret != GSS_S_COMPLETE && ret != GSS_S_CONTINUE_NEEDED) {