Andrew Bartlett f26a2845bd dsdb: Only re-query dSHeuristics for userPassword support on modifies ...

We keep the database startup value for search behaviour, as to re-check
is too expensive.  It caused every search to have an additional
search to the database.

We do not need to check as_system when setting ac->userPassword
as this is checked when all password attributes are stripped

As userPassword is not written to after fUserPwdSupport is set
we do not expose any data that was not already visible.

The database overhead was an oversight when this was
originally added with 7f171a9e0f9b5945bd16a1330ba0908090659030
in 2010.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11853

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>

2016-04-19 04:12:26 +02:00

..

ldb_modules

dsdb: Only re-query dSHeuristics for userPassword support on modifies

2016-04-19 04:12:26 +02:00

cracknames.c

dsdb: Ensure we cope with a samAccountName with a space in it in DsCrackName()

2015-03-12 17:13:42 +01:00

samdb_privilege.c

s4-auth Remove event context from privilage database handling

2010-12-21 15:10:38 +11:00

samdb.c

dsdb: Do not refresh the schema using the wrong event context

2014-06-11 10:18:26 +02:00

samdb.h

repl: Give an error if we get a secret when not expecting one

2015-10-26 05:11:21 +01:00