diff options
| author | Stefan Metzmacher <metze@samba.org> | 2010-12-01 12:18:21 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2010-12-13 15:32:04 +0100 |
| commit | b85a0d929718681cfaf5cdb6d9b30b47386773e0 (patch) | |
| tree | 888c58d7383a59dff6214655cebbd153c1986000 /source4/ldap_server/ldap_backend.c | |
| parent | 9a1fb1351f56d14171125378ca55e20c76b356bd (diff) | |
| download | samba-b85a0d929718681cfaf5cdb6d9b30b47386773e0.tar.gz samba-b85a0d929718681cfaf5cdb6d9b30b47386773e0.tar.bz2 samba-b85a0d929718681cfaf5cdb6d9b30b47386773e0.zip | |
s4:ldap_server: don't call ldb_req_mark_untrusted() on the privileged ldapi socket
metze
Diffstat (limited to 'source4/ldap_server/ldap_backend.c')
| -rw-r--r-- | source4/ldap_server/ldap_backend.c | 20 |
1 files changed, 15 insertions, 5 deletions
diff --git a/source4/ldap_server/ldap_backend.c b/source4/ldap_server/ldap_backend.c index 01d0376b82..f3c9b01b7e 100644 --- a/source4/ldap_server/ldap_backend.c +++ b/source4/ldap_server/ldap_backend.c @@ -321,7 +321,9 @@ static int ldapsrv_add_with_controls(struct ldapsrv_call *call, return ret; } - ldb_req_mark_untrusted(req); + if (!call->conn->is_privileged) { + ldb_req_mark_untrusted(req); + } LDB_REQ_SET_LOCATION(req); @@ -372,7 +374,9 @@ static int ldapsrv_mod_with_controls(struct ldapsrv_call *call, return ret; } - ldb_req_mark_untrusted(req); + if (!call->conn->is_privileged) { + ldb_req_mark_untrusted(req); + } LDB_REQ_SET_LOCATION(req); @@ -416,7 +420,9 @@ static int ldapsrv_del_with_controls(struct ldapsrv_call *call, return ret; } - ldb_req_mark_untrusted(req); + if (!call->conn->is_privileged) { + ldb_req_mark_untrusted(req); + } LDB_REQ_SET_LOCATION(req); @@ -461,7 +467,9 @@ static int ldapsrv_rename_with_controls(struct ldapsrv_call *call, return ret; } - ldb_req_mark_untrusted(req); + if (!call->conn->is_privileged) { + ldb_req_mark_untrusted(req); + } LDB_REQ_SET_LOCATION(req); @@ -600,7 +608,9 @@ static NTSTATUS ldapsrv_SearchRequest(struct ldapsrv_call *call) ldb_set_timeout(samdb, lreq, req->timelimit); - ldb_req_mark_untrusted(lreq); + if (!call->conn->is_privileged) { + ldb_req_mark_untrusted(lreq); + } LDB_REQ_SET_LOCATION(lreq); |