sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00
Code

getncchanges: Let security of RWDC+ manually replicate secrets to RODCs

Browse Source 
This correctly passes has_get_all_changes through to repl_secrets.

Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Pair-programmed-with: Bob Campbell <bobcampbell@catalyst.net.nz>
This commit is contained in:
Garming Sam 2017-03-08 17:12:27 +13:00 committed by Andrew Bartlett
parent 380b56e38a
commit c91c237963
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
source4/rpc_server/drsuapi/getncchanges.c
View File

@ -1962,14 +1962,17 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
if (!W_ERROR_IS_OK(werr)) {
return werr;
}
if (is_secret_request && req10->extended_op != DRSUAPI_EXOP_REPL_SECRET) {
if (is_secret_request) {
werr = drs_security_access_check_nc_root(b_state->sam_ctx,
mem_ctx,
dce_call->conn->auth_state.session_info->security_token,
req10->naming_context,
GUID_DRS_GET_ALL_CHANGES);
if (!W_ERROR_IS_OK(werr)) {
return werr;
/* Only bail if this is not a EXOP_REPL_SECRET */
if (req10->extended_op != DRSUAPI_EXOP_REPL_SECRET) {
return werr;
}
} else {
has_get_all_changes = true;
}