]> git.ipfire.org Git - thirdparty/samba.git/commit
CVE-2018-1057: s4:dsdb: use DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID
authorRalph Boehme <slow@samba.org>
Fri, 16 Feb 2018 14:38:19 +0000 (15:38 +0100)
committerKarolin Seeger <kseeger@samba.org>
Mon, 12 Mar 2018 12:06:14 +0000 (13:06 +0100)
commite5b8c81d2951401691ea6a5e8082edf81354d1a1
tree2f7d905091340b4264cb4c2b4efc20ee777325fe
parent4adcba5f6aecacde5b405bdd1bdc662d303137e3
CVE-2018-1057: s4:dsdb: use DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID

This is used to pass information about which password change operation (change
or reset) the acl module validated, down to the password_hash module.

It's very important that both modules treat the request identical.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13272

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/dsdb/samdb/ldb_modules/acl.c
source4/dsdb/samdb/ldb_modules/password_hash.c