r9194: do not enumerate privileges when they are not enabled

(This used to be commit ff6e3464a2df7fd8a79da8f059a080934d9b3749)

diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c
index 15d420538ef11d8f957f44b5c2864d96e03da523..b9db5c6b59e94a94d3a8db3adec454c4a31d2045 100644 (file)
--- a/source3/rpc_server/srv_lsa_nt.c
+++ b/source3/rpc_server/srv_lsa_nt.c
@@ -805,12 +805,17 @@ NTSTATUS _lsa_enum_privs(pipes_struct *p, LSA_Q_ENUM_PRIVS *q_u, LSA_R_ENUM_PRIV
        struct lsa_info *handle;
        uint32 i;
        uint32 enum_context = q_u->enum_context;
-       int num_privs = count_all_privileges();
+       int num_privs = 0;
        LSA_PRIV_ENTRY *entries = NULL;
        LUID_ATTR luid;
 
        /* remember that the enum_context starts at 0 and not 1 */
 
+       if ( lp_enable_privileges() )
+               num_privs = count_all_privileges();
+       else
+               DEBUG(0,("_lsa_enum_privs: client trying to enumerate privileges by not enabled in smb.conf!\n"));
+
        if ( enum_context >= num_privs )
                return NT_STATUS_NO_MORE_ENTRIES;