CVE-2020-25717: s3:rpcclient: start with authoritative = 1
authorStefan Metzmacher <metze@samba.org>
Tue, 26 Oct 2021 15:42:41 +0000 (17:42 +0200)
committerJule Anger <janger@samba.org>
Tue, 9 Nov 2021 19:45:32 +0000 (19:45 +0000)
This is not strictly needed, but makes it easier to audit
that we don't miss important places.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14556

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/rpcclient/cmd_netlogon.c

index 18e1862ebaab888e5a3791fba478d9f592586858..bb5b9dafed4f740ecbc934c7676f91c9990cdf15 100644 (file)
@@ -497,7 +497,7 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
        uint32_t logon_param = 0;
        const char *workstation = NULL;
        struct netr_SamInfo3 *info3 = NULL;
-       uint8_t authoritative = 0;
+       uint8_t authoritative = 1;
        uint32_t flags = 0;
        uint16_t validation_level;
        union netr_Validation *validation = NULL;