diff options
| author | Nadezhda Ivanova <nivanova@samba.org> | 2010-10-27 14:04:03 +0300 |
|---|---|---|
| committer | Nadezhda Ivanova <nivanova@samba.org> | 2010-10-27 11:55:11 +0000 |
| commit | 3003bd40379b669e8b2cef7a40784f0114344f8e (patch) | |
| tree | 05820473372336d6ffe459765ae0335d3bc56a65 /source4/ldap_server | |
| parent | b1f6a2be271881cb93764b54dc89d35f4467f1fb (diff) | |
| download | samba-3003bd40379b669e8b2cef7a40784f0114344f8e.tar.gz samba-3003bd40379b669e8b2cef7a40784f0114344f8e.tar.bz2 samba-3003bd40379b669e8b2cef7a40784f0114344f8e.zip | |
s4-ldb: Changes the aclread module to use LDB_HANDLE_FLAG_UNTRUSTED to determine the source of the request
The aclread module used to use a control to make sure the request comes from the ldap server,
but now the rootdse filters out any unregistered controls comming from ldap, so the control is
lost. Using the LDB_HANDLE_FLAG_UNTRUSTED is a much more elegant solution.
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Wed Oct 27 11:55:11 UTC 2010 on sn-devel-104
Diffstat (limited to 'source4/ldap_server')
| -rw-r--r-- | source4/ldap_server/ldap_backend.c | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/source4/ldap_server/ldap_backend.c b/source4/ldap_server/ldap_backend.c index 671e94adce..e45c180e31 100644 --- a/source4/ldap_server/ldap_backend.c +++ b/source4/ldap_server/ldap_backend.c @@ -594,7 +594,6 @@ static NTSTATUS ldapsrv_SearchRequest(struct ldapsrv_call *call) } } - ldb_request_add_control(lreq, DSDB_CONTROL_SEARCH_APPLY_ACCESS, false, NULL); ldb_set_timeout(samdb, lreq, req->timelimit); ldb_req_mark_untrusted(lreq); |