mirror of
https://github.com/samba-team/samba.git
synced 2025-11-26 04:23:49 +03:00
winbind cache: Don't create SN cache entries during name-to-sid queries.
Clients can request name-to-sid queries for different combinations of upper and lower case names. We don't want to create the reverse caching entries for each combination used. This avoids inconsistent answers on sid-to-name queries. Please review! Karolin
This commit is contained in:
@@ -1451,13 +1451,13 @@ do_query:
|
||||
if (domain->online &&
|
||||
(NT_STATUS_IS_OK(status) || NT_STATUS_EQUAL(status, NT_STATUS_NONE_MAPPED))) {
|
||||
wcache_save_name_to_sid(domain, status, domain_name, name, sid, *type);
|
||||
|
||||
/* Don't add SN cache entries for sid-to-name queries during this operation.
|
||||
* It leads to inconsistent answers during sid-to-name queries as the
|
||||
* client can ask for different combinations of lower case and upper case
|
||||
* names in these name-to-sid queries.
|
||||
*/
|
||||
|
||||
/* Only save the reverse mapping if this was not a UPN */
|
||||
if (!strchr(name, '@')) {
|
||||
strupper_m(CONST_DISCARD(char *,domain_name));
|
||||
strlower_m(CONST_DISCARD(char *,name));
|
||||
wcache_save_sid_to_name(domain, status, sid, domain_name, name, *type);
|
||||
}
|
||||
}
|
||||
|
||||
return status;
|
||||
|
||||
Reference in New Issue
Block a user