1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

py:gpo: Fix testing of 0x8000 bit

Signed-off-by: Pavel Filipenský <pfilipen@redhat.com>
Reviewed-by: David Mulder <dmulder@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): David Mulder <dmulder@samba.org>
Autobuild-Date(master): Thu May 26 19:36:52 UTC 2022 on sn-devel-184
This commit is contained in:
Pavel Filipenský 2022-05-26 15:38:23 +02:00 committed by David Mulder
parent 37c6a327ed
commit 5e00c230ec

View File

@ -356,7 +356,7 @@ class gp_cert_auto_enroll_ext(gp_pol_ext):
for e in pol_conf.entries:
if e.keyname == section and e.valuename == 'AEPolicy':
# This policy applies as specified in [MS-CAESO] 4.4.5.1
if e.data == 0x8000:
if e.data & 0x8000:
continue # The policy is disabled
enroll = e.data & 0x1 == 0x1
manage = e.data & 0x2 == 0x2
@ -462,8 +462,8 @@ class gp_cert_auto_enroll_ext(gp_pol_ext):
return output
for e in pol_conf.entries:
if e.keyname == section and e.valuename == 'AEPolicy':
enroll = e.data & 0x1 == 1
if e.data == 0x8000 or not enroll:
enroll = e.data & 0x1 == 0x1
if e.data & 0x8000 or not enroll:
continue
output['Auto Enrollment Policy'] = {}
url = 'ldap://%s' % get_dc_hostname(self.creds, self.lp)