3 Commits

Author	SHA1	Message	Date
Andrew Bartlett	a3aee582a5	CVE-2020-25722 Ensure the structural objectclass cannot be changed ... If the structural objectclass is allowed to change, then the restrictions locking an object to remaining a user or computer will not be enforcable. Likewise other LDAP inheritance rules, which allow only certain child objects can be bypassed, which can in turn allow creation of (unprivileged) users where only DNS objects were expected. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14753 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14889 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>	2021-11-09 19:45:34 +00:00
Douglas Bagnall	e5a099482d	pytests: try ldap.modify_order with normal user ... We run the tests again, trying to modify as a normal user rather than Administrator. It turns out that we do not always return the same error code as Windows, but in all these tests both Windows and Samba always return some kind of error (as you might hope). Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2019-05-01 05:32:25 +00:00
Douglas Bagnall	c73888ff6f	dsdb pytests: test the effect of reordering modify requests ... Do we interpret these the same way as Windows? In many cases, no. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2019-05-01 05:32:25 +00:00