sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code

s4-ldap-server: disallow all modifies on global catalog port

Browse Source
This commit is contained in:
Andrew Tridgell 2011-09-23 16:15:24 +10:00
parent 1df100393b
commit 0d2d6c94d2
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
source4/ldap_server/ldap_backend.c
View File

@ -305,6 +305,11 @@ static int ldapsrv_add_with_controls(struct ldapsrv_call *call,
if (ret != LDB_SUCCESS) return ret;
if (call->conn->global_catalog) {
return ldb_error(ldb, LDB_ERR_UNWILLING_TO_PERFORM, "modify forbidden on global catalog port");
}
ldb_request_add_control(req, DSDB_CONTROL_NO_GLOBAL_CATALOG, false, NULL);
ret = ldb_transaction_start(ldb);
if (ret != LDB_SUCCESS) {
return ret;
@ -358,6 +363,11 @@ static int ldapsrv_mod_with_controls(struct ldapsrv_call *call,
return ret;
}
if (call->conn->global_catalog) {
return ldb_error(ldb, LDB_ERR_UNWILLING_TO_PERFORM, "modify forbidden on global catalog port");
}
ldb_request_add_control(req, DSDB_CONTROL_NO_GLOBAL_CATALOG, false, NULL);
ret = ldb_transaction_start(ldb);
if (ret != LDB_SUCCESS) {
return ret;
@ -404,6 +414,11 @@ static int ldapsrv_del_with_controls(struct ldapsrv_call *call,
if (ret != LDB_SUCCESS) return ret;
if (call->conn->global_catalog) {
return ldb_error(ldb, LDB_ERR_UNWILLING_TO_PERFORM, "modify forbidden on global catalog port");
}
ldb_request_add_control(req, DSDB_CONTROL_NO_GLOBAL_CATALOG, false, NULL);
ret = ldb_transaction_start(ldb);
if (ret != LDB_SUCCESS) {
return ret;
@ -451,6 +466,11 @@ static int ldapsrv_rename_with_controls(struct ldapsrv_call *call,
if (ret != LDB_SUCCESS) return ret;
if (call->conn->global_catalog) {
return ldb_error(ldb, LDB_ERR_UNWILLING_TO_PERFORM, "modify forbidden on global catalog port");
}
ldb_request_add_control(req, DSDB_CONTROL_NO_GLOBAL_CATALOG, false, NULL);
ret = ldb_transaction_start(ldb);
if (ret != LDB_SUCCESS) {
return ret;