From 1cb9484a42af5467cf96818a8459ca3fb3f81066 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Wed, 18 Jan 2006 11:22:30 +0000 Subject: r12996: Restrict this search to domain objects. Andrew Bartlett (This used to be commit 4d69eae382a789910d24ecadfb08b8d95a3c04b0) --- source4/dsdb/samdb/cracknames.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'source4/dsdb') diff --git a/source4/dsdb/samdb/cracknames.c b/source4/dsdb/samdb/cracknames.c index 9dd44e680b..d86484eb8a 100644 --- a/source4/dsdb/samdb/cracknames.c +++ b/source4/dsdb/samdb/cracknames.c @@ -716,7 +716,7 @@ static WERROR DsCrackNameOneFilter(struct ldb_context *sam_ctx, TALLOC_CTX *mem_ } dom_sid->num_auths--; ldb_ret = gendb_search(sam_ctx, mem_ctx, NULL, &domain_res, attrs, - "(objectSid=%s)", ldap_encode_ndr_dom_sid(mem_ctx, dom_sid)); + "(&(objectSid=%s)(objectClass=domain))", ldap_encode_ndr_dom_sid(mem_ctx, dom_sid)); if (ldb_ret != 1) { info1->status = DRSUAPI_DS_NAME_STATUS_NOT_FOUND; return WERR_OK; -- cgit