summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2023-01-25 15:18:47 +1300
committerJule Anger <janger@samba.org>2023-02-03 09:35:08 +0000
commitfba94e5d50433e8869e72d0ae2bb68fa2abab03e (patch)
treecfa4c594acf0a7b9dd8b9ada1fbc492cb03eb121
parentbcb89bd81d4e51fbd06e205816e0b891dc0c1889 (diff)
downloadsamba-fba94e5d50433e8869e72d0ae2bb68fa2abab03e.tar.gz
s4-dsdb: Require that the NTDS object is an nTDSDSA objectclass
This should avoid a user being able to specify the GUID of a different type of object. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10635 Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit adb776149e5ac0eb346992775610627106e1a986)
-rw-r--r--source4/dsdb/common/util.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c
index 43fa670006d..a30ae662c1e 100644
--- a/source4/dsdb/common/util.c
+++ b/source4/dsdb/common/util.c
@@ -3578,7 +3578,7 @@ int samdb_get_ntds_obj_by_guid(TALLOC_CTX *mem_ctx,
LDB_SCOPE_SUBTREE,
attrs,
DSDB_SEARCH_ONE_ONLY,
- "objectGUID=%s",
+ "(&(objectGUID=%s)(objectClass=nTDSDSA))",
guid_str);
if (ret != LDB_SUCCESS) {
return ret;