sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-02 00:22:11 +03:00
Code Activity

s4-ldap: mark all ldap:// requests as untrusted

Browse Source 
this allows the rootdse module to filter unregistered controls

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Andrew Tridgell
2010-10-19 11:22:12 +11:00
parent 80a4adc062
commit 423365d5fa
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
source4/ldap_server/ldap_backend.c
View File

@ -27,6 +27,7 @@
#include "smbd/service_stream.h"
#include "dsdb/samdb/samdb.h"
#include "lib/ldb/include/ldb_errors.h"
#include "lib/ldb/include/ldb_module.h"
#include "ldb_wrap.h"
#define VALID_DN_SYNTAX(dn) do {\
@ -319,6 +320,10 @@ static int ldb_add_with_controls(struct ldb_context *ldb,
return ret;
}
ldb_req_mark_untrusted(req);
LDB_REQ_SET_LOCATION(req);
ret = ldb_request(ldb, req);
if (ret == LDB_SUCCESS) {
ret = ldb_wait(req->handle, LDB_WAIT_ALL);
@ -365,6 +370,10 @@ static int ldb_mod_req_with_controls(struct ldb_context *ldb,
return ret;
}
ldb_req_mark_untrusted(req);
LDB_REQ_SET_LOCATION(req);
ret = ldb_request(ldb, req);
if (ret == LDB_SUCCESS) {
ret = ldb_wait(req->handle, LDB_WAIT_ALL);
@ -404,6 +413,10 @@ static int ldb_del_req_with_controls(struct ldb_context *ldb,
return ret;
}
ldb_req_mark_untrusted(req);
LDB_REQ_SET_LOCATION(req);
ret = ldb_request(ldb, req);
if (ret == LDB_SUCCESS) {
ret = ldb_wait(req->handle, LDB_WAIT_ALL);
@ -444,6 +457,10 @@ int ldb_rename_with_controls(struct ldb_context *ldb,
return ret;
}
ldb_req_mark_untrusted(req);
LDB_REQ_SET_LOCATION(req);
ret = ldb_request(ldb, req);
if (ret == LDB_SUCCESS) {
ret = ldb_wait(req->handle, LDB_WAIT_ALL);
@ -580,6 +597,10 @@ static NTSTATUS ldapsrv_SearchRequest(struct ldapsrv_call *call)
ldb_request_add_control(lreq, DSDB_CONTROL_SEARCH_APPLY_ACCESS, false, NULL);
ldb_set_timeout(samdb, lreq, req->timelimit);
ldb_req_mark_untrusted(lreq);
LDB_REQ_SET_LOCATION(lreq);
ldb_ret = ldb_request(samdb, lreq);
if (ldb_ret != LDB_SUCCESS) {