summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2012-11-09 11:25:21 +0100
committerAndrew Bartlett <abartlet@samba.org>2012-11-12 09:42:21 +1100
commit54ad5c70e3cc731c872913841cbcd2ef29ec0e54 (patch)
treeeec2b508ce2f22e657d481c317625c7e0a47989a
parent94649e46b4dec528ab7e750d06a65ada3d978342 (diff)
downloadsamba-54ad5c70e3cc731c872913841cbcd2ef29ec0e54.tar.gz
samba-54ad5c70e3cc731c872913841cbcd2ef29ec0e54.tar.bz2
samba-54ad5c70e3cc731c872913841cbcd2ef29ec0e54.zip
s4:dsdb/acl: fix search filter cleanup for password attributes
We need to this when we're *not* system. Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
-rw-r--r--source4/dsdb/samdb/ldb_modules/acl.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/dsdb/samdb/ldb_modules/acl.c b/source4/dsdb/samdb/ldb_modules/acl.c
index 843d17e5d1..05926fb01b 100644
--- a/source4/dsdb/samdb/ldb_modules/acl.c
+++ b/source4/dsdb/samdb/ldb_modules/acl.c
@@ -1499,7 +1499,7 @@ static int acl_search(struct ldb_module *module, struct ldb_request *req)
/* replace any attributes in the parse tree that are private,
so we don't allow a search for 'userPassword=penguin',
just as we would not allow that attribute to be returned */
- if (ac->am_system) {
+ if (!ac->am_system) {
/* FIXME: We should copy the tree and keep the original unmodified. */
/* remove password attributes */
if (data && data->password_attrs) {