From: Andreas Schneider <asn@samba.org>
Date: Fri, 29 Jun 2012 14:42:16 +0000 (+0200)
Subject: s4-lsarpc: Restrict LookupSids3 to crypto connections only.
X-Git-Url: http://git.samba.org/?p=mat%2Fsamba.git;a=commitdiff_plain;h=997c780d24d8f59890ffe92c26107ff4f544a038

s4-lsarpc: Restrict LookupSids3 to crypto connections only.
---

diff --git a/source4/rpc_server/lsa/lsa_lookup.c b/source4/rpc_server/lsa/lsa_lookup.c
index 0855b9dfce..b96adaa13d 100644
--- a/source4/rpc_server/lsa/lsa_lookup.c
+++ b/source4/rpc_server/lsa/lsa_lookup.c
@@ -663,10 +663,20 @@ NTSTATUS dcesrv_lsa_LookupSids3(struct dcesrv_call_state *dce_call,
 				TALLOC_CTX *mem_ctx,
 				struct lsa_LookupSids3 *r)
 {
+	struct dcerpc_auth *auth_info = dce_call->conn->auth_state.auth_info;
 	struct lsa_policy_state *policy_state;
 	struct lsa_LookupSids2 q;
 	NTSTATUS status;
 
+	/*
+	 * We don't have policy handles on this call. So this must be restricted
+	 * to crypto connections only.
+	 */
+	if (auth_info->auth_type != DCERPC_AUTH_TYPE_SCHANNEL ||
+	    auth_info->auth_level < DCERPC_AUTH_LEVEL_INTEGRITY) {
+		DCESRV_FAULT(DCERPC_FAULT_ACCESS_DENIED);
+	}
+
 	status = dcesrv_lsa_get_policy_state(dce_call, mem_ctx, &policy_state);
 	if (!NT_STATUS_IS_OK(status)) {
 		return status;