diff options
| author | Matthias Dieter Wallnöfer <mdw@samba.org> | 2011-10-26 09:47:35 +0200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2012-03-26 00:57:29 +0200 |
| commit | d6fde2d4c24d7fb5e040ccb00476f689a4472eff (patch) | |
| tree | 1759615aec29394b70909be9b2378a7747168e75 /lib/ldb/ldb_tdb/ldb_cache.c | |
| parent | 438971e214e6f55f19148ed2afc03ec1c7066f65 (diff) | |
| download | samba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.tar.gz samba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.tar.bz2 samba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.zip | |
LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD mode
Achieve this by introducing a "disallowDNFilter" flag.
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'lib/ldb/ldb_tdb/ldb_cache.c')
| -rw-r--r-- | lib/ldb/ldb_tdb/ldb_cache.c | 10 |
1 files changed, 8 insertions, 2 deletions
diff --git a/lib/ldb/ldb_tdb/ldb_cache.c b/lib/ldb/ldb_tdb/ldb_cache.c index 0b93021884..6467af1d00 100644 --- a/lib/ldb/ldb_tdb/ldb_cache.c +++ b/lib/ldb/ldb_tdb/ldb_cache.c @@ -346,11 +346,17 @@ int ltdb_cache_load(struct ldb_module *module) goto failed; } - /* set flag for checking base DN on searches */ + /* set flags if they do exist */ if (r == LDB_SUCCESS) { - ltdb->check_base = ldb_msg_find_attr_as_bool(options, LTDB_CHECK_BASE, false); + ltdb->check_base = ldb_msg_find_attr_as_bool(options, + LTDB_CHECK_BASE, + false); + ltdb->disallow_dn_filter = ldb_msg_find_attr_as_bool(options, + LTDB_DISALLOW_DN_FILTER, + false); } else { ltdb->check_base = false; + ltdb->disallow_dn_filter = false; } talloc_free(ltdb->cache->indexlist); |