diff options
| author | Andrew Tridgell <tridge@samba.org> | 2010-08-17 14:12:21 +1000 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2010-08-17 21:21:50 +1000 |
| commit | 45a2b408ba16ebabedc519a7235b05c104dede6b (patch) | |
| tree | 2d19a5608d123252a2e21297ead88776f61fc611 /source4/rpc_server/drsuapi/getncchanges.c | |
| parent | 84bedf4028a5c841f08c079bfd20b9111fe52777 (diff) | |
| download | samba-45a2b408ba16ebabedc519a7235b05c104dede6b.tar.gz samba-45a2b408ba16ebabedc519a7235b05c104dede6b.tar.bz2 samba-45a2b408ba16ebabedc519a7235b05c104dede6b.zip | |
s4-drs: added domain_sid to DRS security checks
we need the domain_sid to determine if the account is a RODC for our
domain
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'source4/rpc_server/drsuapi/getncchanges.c')
| -rw-r--r-- | source4/rpc_server/drsuapi/getncchanges.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/source4/rpc_server/drsuapi/getncchanges.c b/source4/rpc_server/drsuapi/getncchanges.c index cea5fc99c6..dcf1dbef5c 100644 --- a/source4/rpc_server/drsuapi/getncchanges.c +++ b/source4/rpc_server/drsuapi/getncchanges.c @@ -760,7 +760,8 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_ return WERR_DS_DRA_SOURCE_DISABLED; } - werr = drs_security_level_check(dce_call, "DsGetNCChanges", SECURITY_RO_DOMAIN_CONTROLLER); + werr = drs_security_level_check(dce_call, "DsGetNCChanges", SECURITY_RO_DOMAIN_CONTROLLER, + samdb_domain_sid(b_state->sam_ctx)); if (!W_ERROR_IS_OK(werr)) { return werr; } |