From d6fde2d4c24d7fb5e040ccb00476f689a4472eff Mon Sep 17 00:00:00 2001
From: Matthias Dieter Wallnöfer <mdw@samba.org>
Date: Wed, 26 Oct 2011 09:47:35 +0200
Subject: LDB/s4 - deny the "(dn=...)" syntax on search filters when in AD mode

Achieve this by introducing a "disallowDNFilter" flag.

Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
---
 source4/setup/provision_init.ldif | 1 +
 1 file changed, 1 insertion(+)

(limited to 'source4/setup/provision_init.ldif')

diff --git a/source4/setup/provision_init.ldif b/source4/setup/provision_init.ldif
index d9ec28624b..68b3d97673 100644
--- a/source4/setup/provision_init.ldif
+++ b/source4/setup/provision_init.ldif
@@ -20,6 +20,7 @@ passwordAttribute: initialAuthIncoming
 
 dn: @OPTIONS
 checkBaseOnSearch: TRUE
+disallowDNFilter: TRUE
 
 dn: @SAMBA_DSDB
 backendType: ${BACKEND_TYPE}
-- 
cgit