03/03: [LSASRV] LsapLogonUser creates an impersonation token for a network logon

[Eric Kohl]

https://git.reactos.org/?p=reactos.git;a=commitdiff;h=fc2b4bc7ea10e5d458b19…

commit fc2b4bc7ea10e5d458b1920cb7c18650ae493afa
Author:     Eric Kohl <eric.kohl(a)reactos.org>
AuthorDate: Mon Aug 27 00:19:10 2018 +0200
Commit:     Eric Kohl <eric.kohl(a)reactos.org>
CommitDate: Mon Aug 27 00:19:10 2018 +0200

    [LSASRV] LsapLogonUser creates an impersonation token for a network logon
---
 dll/win32/lsasrv/authpackage.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dll/win32/lsasrv/authpackage.c b/dll/win32/lsasrv/authpackage.c
index 7405e0904e..8eef860c41 100644
--- a/dll/win32/lsasrv/authpackage.c
+++ b/dll/win32/lsasrv/authpackage.c
@@ -1570,7 +1570,7 @@ LsapLogonUser(PLSA_API_MSG RequestMsg,
         Status = NtCreateToken(&TokenHandle,
                                TOKEN_ALL_ACCESS,
                                &ObjectAttributes,
-                               TokenPrimary,
+                               (RequestMsg->LogonUser.Request.LogonType == Network) ?
TokenImpersonation : TokenPrimary,
                                &RequestMsg->LogonUser.Reply.LogonId,
                                &TokenInfo1->ExpirationTime,
                                &TokenInfo1->User,