summaryrefslogtreecommitdiff
path: root/source4/rpc_server/drsuapi
diff options
context:
space:
mode:
authorKamen Mazdrashki <kamenim@samba.org>2010-04-26 00:22:53 +0300
committerKamen Mazdrashki <kamenim@samba.org>2010-04-28 12:11:03 +0300
commitbf49ac99c94e4d937fd8d0532761b5635e372d84 (patch)
treeb1f591e2eeb8f262e63c69f037be7603080b159b /source4/rpc_server/drsuapi
parent5197d76faa6316d7e80b1c714c7a6f028ce527d2 (diff)
downloadsamba-bf49ac99c94e4d937fd8d0532761b5635e372d84.tar.gz
samba-bf49ac99c94e4d937fd8d0532761b5635e372d84.tar.bz2
samba-bf49ac99c94e4d937fd8d0532761b5635e372d84.zip
s4/dsdb: dsdb_validate_invocation_id() should validate by objectGUID
This function is used in DRSUpdateRefs() implementation where we get DSA's objectGUID rather than invocationId
Diffstat (limited to 'source4/rpc_server/drsuapi')
-rw-r--r--source4/rpc_server/drsuapi/updaterefs.c8
1 files changed, 4 insertions, 4 deletions
diff --git a/source4/rpc_server/drsuapi/updaterefs.c b/source4/rpc_server/drsuapi/updaterefs.c
index 0403db8f88..d52a77959a 100644
--- a/source4/rpc_server/drsuapi/updaterefs.c
+++ b/source4/rpc_server/drsuapi/updaterefs.c
@@ -211,10 +211,10 @@ WERROR dcesrv_drsuapi_DsReplicaUpdateRefs(struct dcesrv_call_state *dce_call, TA
security_level = security_session_user_level(dce_call->conn->auth_state.session_info, NULL);
if (security_level < SECURITY_ADMINISTRATOR) {
- /* check that they are using an invocationId that they own */
- ret = dsdb_validate_invocation_id(b_state->sam_ctx,
- &req->dest_dsa_guid,
- dce_call->conn->auth_state.session_info->security_token->user_sid);
+ /* check that they are using an DSA objectGUID that they own */
+ ret = dsdb_validate_dsa_guid(b_state->sam_ctx,
+ &req->dest_dsa_guid,
+ dce_call->conn->auth_state.session_info->security_token->user_sid);
if (ret != LDB_SUCCESS) {
DEBUG(0,(__location__ ": Refusing DsReplicaUpdateRefs for sid %s with GUID %s\n",
dom_sid_string(mem_ctx,