r22352: Wow - working gss SMB sealing !

Jeremy.
(This used to be commit abcb2a4b0709ef84c50c1d9a85191dc3866cd138)

diff --git a/source3/smbd/seal.c b/source3/smbd/seal.c
index 7dd6e3d7bbf3a1625a1397a1a71f37db6cd930a7..07ef186e2ede1097c1ad3ec4beb94f6500d063e6 100644 (file)
--- a/source3/smbd/seal.c
+++ b/source3/smbd/seal.c
@@ -365,6 +365,8 @@ static NTSTATUS srv_enc_spnego_gss_negotiate(unsigned char **ppdata, size_t *p_d
        out_buf.value = NULL;
        out_buf.length = 0;
 
+       become_root();
+
        ret = gss_accept_sec_context(&min,
                                &gss_state->gss_ctx,
                                gss_state->creds,
@@ -376,6 +378,7 @@ static NTSTATUS srv_enc_spnego_gss_negotiate(unsigned char **ppdata, size_t *p_d
                                &flags,
                                NULL,           /* Ingore time. */
                                NULL);          /* Ignore delegated creds. */
+       unbecome_root();
 
        status = gss_err_to_ntstatus(ret, min);
        if (ret != GSS_S_COMPLETE && ret != GSS_S_CONTINUE_NEEDED) {