summaryrefslogtreecommitdiff
path: root/source4/setup
diff options
context:
space:
mode:
authorMatthias Dieter Wallnöfer <mdw@samba.org>2011-10-26 09:47:35 +0200
committerAndrew Bartlett <abartlet@samba.org>2012-03-26 00:57:29 +0200
commitd6fde2d4c24d7fb5e040ccb00476f689a4472eff (patch)
tree1759615aec29394b70909be9b2378a7747168e75 /source4/setup
parent438971e214e6f55f19148ed2afc03ec1c7066f65 (diff)
downloadsamba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.tar.gz
samba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.tar.bz2
samba-d6fde2d4c24d7fb5e040ccb00476f689a4472eff.zip
LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD mode
Achieve this by introducing a "disallowDNFilter" flag. Reviewed-by: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'source4/setup')
-rw-r--r--source4/setup/provision_init.ldif1
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/setup/provision_init.ldif b/source4/setup/provision_init.ldif
index d9ec28624b..68b3d97673 100644
--- a/source4/setup/provision_init.ldif
+++ b/source4/setup/provision_init.ldif
@@ -20,6 +20,7 @@ passwordAttribute: initialAuthIncoming
dn: @OPTIONS
checkBaseOnSearch: TRUE
+disallowDNFilter: TRUE
dn: @SAMBA_DSDB
backendType: ${BACKEND_TYPE}