diff options
| author | Stefan Metzmacher <metze@samba.org> | 2014-01-16 07:49:56 +0100 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2014-02-11 16:02:14 +0100 |
| commit | 2e093cc0cc0ff14ff189947ab0a267f089fab97c (patch) | |
| tree | 338d10e8da604dd89a7045004157d3e082bf51ce /source4/librpc/rpc/dcerpc_auth.c | |
| parent | 1137d62d9d1f67d2721d3fc63f5770477d42dcec (diff) | |
| download | samba-2e093cc0cc0ff14ff189947ab0a267f089fab97c.tar.gz | |
s4:librpc/rpc: only propose header signing if we use sign or seal
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Guenther Deschner <gd@samba.org>
Diffstat (limited to 'source4/librpc/rpc/dcerpc_auth.c')
| -rw-r--r-- | source4/librpc/rpc/dcerpc_auth.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/source4/librpc/rpc/dcerpc_auth.c b/source4/librpc/rpc/dcerpc_auth.c index a1467164953..bace29a9d64 100644 --- a/source4/librpc/rpc/dcerpc_auth.c +++ b/source4/librpc/rpc/dcerpc_auth.c @@ -398,7 +398,9 @@ struct composite_context *dcerpc_bind_auth_send(TALLOC_CTX *mem_ctx, sec->auth_info->credentials = state->credentials; if (gensec_have_feature(sec->generic_state, GENSEC_FEATURE_SIGN_PKT_HEADER)) { - state->pipe->conn->flags |= DCERPC_PROPOSE_HEADER_SIGNING; + if (auth_level >= DCERPC_AUTH_LEVEL_INTEGRITY) { + state->pipe->conn->flags |= DCERPC_PROPOSE_HEADER_SIGNING; + } } /* The first request always is a dcerpc_bind. The subsequent ones |