diff options
author | Andrew Bartlett <abartlet@samba.org> | 2017-03-06 14:10:17 +1300 |
---|---|---|
committer | Andrew Bartlett <abartlet@samba.org> | 2017-03-29 02:37:27 +0200 |
commit | 366f8cf0903e3583fda42696df62a5337f22131f (patch) | |
tree | 3df24e4d721df9d9ca7c19b5aed6d642899df642 /source4/smb_server | |
parent | f4a4522d1f8c19fdf142e12760160b15de1557ec (diff) | |
download | samba-366f8cf0903e3583fda42696df62a5337f22131f.tar.gz |
auth: Log the transport connection for the authorization
We also log if a simple bind was over TLS, as this particular case matters to a lot of folks
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'source4/smb_server')
-rw-r--r-- | source4/smb_server/smb/sesssetup.c | 2 | ||||
-rw-r--r-- | source4/smb_server/smb2/sesssetup.c | 1 |
2 files changed, 3 insertions, 0 deletions
diff --git a/source4/smb_server/smb/sesssetup.c b/source4/smb_server/smb/sesssetup.c index 594efd0c02d..cc022229736 100644 --- a/source4/smb_server/smb/sesssetup.c +++ b/source4/smb_server/smb/sesssetup.c @@ -58,6 +58,7 @@ void smbsrv_not_spengo_sesssetup_authz_log(struct smbsrv_request *req, local_address, "SMB", "bare-NTLM", + AUTHZ_TRANSPORT_PROTECTION_SMB, session_info); talloc_free(frame); @@ -510,6 +511,7 @@ static void sesssetup_spnego(struct smbsrv_request *req, union smb_sesssetup *se } gensec_want_feature(gensec_ctx, GENSEC_FEATURE_SESSION_KEY); + gensec_want_feature(gensec_ctx, GENSEC_FEATURE_SMB_TRANSPORT); remote_address = socket_get_remote_addr(req->smb_conn->connection->socket, req); diff --git a/source4/smb_server/smb2/sesssetup.c b/source4/smb_server/smb2/sesssetup.c index 0a66f46856d..501aab671d7 100644 --- a/source4/smb_server/smb2/sesssetup.c +++ b/source4/smb_server/smb2/sesssetup.c @@ -145,6 +145,7 @@ static void smb2srv_sesssetup_backend(struct smb2srv_request *req, union smb_ses } gensec_want_feature(gensec_ctx, GENSEC_FEATURE_SESSION_KEY); + gensec_want_feature(gensec_ctx, GENSEC_FEATURE_SMB_TRANSPORT); remote_address = socket_get_remote_addr(req->smb_conn->connection->socket, req); |