sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00
Code

ldb_match - Ignore ":dn" part of extended matches for now

Browse Source 
It's not fully clear what this ":dn" part means for us. What we know is that
older AD implementations (Windows Server 2000, 2003) need it to have extended
matches working in the expected way.

To be able to interoperate with s3's winbind and other tools I and gd decided
to transform this into a warning until we know what to do.

This should fix bug #6511.
This commit is contained in:
Matthias Dieter Wallnöfer 2010-02-11 15:42:48 +01:00
parent 45defdb90c
commit 14c4c2c735
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
source4/lib/ldb/common/ldb_match.c
View File

@ -316,8 +316,11 @@ static int ldb_match_extended(struct ldb_context *ldb,
struct ldb_message_element *el;
if (tree->u.extended.dnAttributes) {
ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb: dnAttributes extended match not supported yet");
return -1;
/* FIXME: We really need to find out what this ":dn" part in
* an extended match means and how to handle it. For now print
* only a warning to have s3 winbind and other tools working
* against us. - Matthias */
ldb_debug(ldb, LDB_DEBUG_WARNING, "ldb: dnAttributes extended match not supported yet");
}
if (tree->u.extended.rule_id == NULL) {
ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb: no-rule extended matches not supported yet");