sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00
Code

s4-drsuapi: Clarify role of drs_security_access_check_nc_root()

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 1838f349c94b878de1740af35351a2e8e0c8cffb)
This commit is contained in:
Andrew Bartlett 2023-01-25 16:01:48 +13:00 committed by Jule Anger
parent 262fef5acb
commit 68fcea19bd
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
source4/rpc_server/drsuapi/getncchanges.c
View File

@ -2830,7 +2830,11 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
user_sid = &session_info->security_token->sids[PRIMARY_USER_SID_INDEX];
/* all clients must have GUID_DRS_GET_CHANGES */
/*
* all clients must have GUID_DRS_GET_CHANGES. This finds the
* actual NC root of the given value and checks that, allowing
* REPL_OBJ to work safely
*/
werr = drs_security_access_check_nc_root(sam_ctx,
mem_ctx,
session_info->security_token,