libcli/security: condtional ACE recursive composites are not supported

We can't add them via SDDL on Windows, and they aren't useful for
claims.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Wed Sep 27 00:41:26 UTC 2023 on atb-devel-224

diff --git a/libcli/security/conditional_ace.c b/libcli/security/conditional_ace.c
index 7e4590a1666619ff1506f71ed35ede4c59b3547d..b970e2fe0b4f13995ed5610e4bdc7820f015924d 100644 (file)
--- a/libcli/security/conditional_ace.c
+++ b/libcli/security/conditional_ace.c
@@ -364,11 +364,9 @@ static ssize_t pull_composite(TALLOC_CTX *mem_ctx,
                        break;
 
                case CONDITIONAL_ACE_TOKEN_COMPOSITE:
-                       consumed = pull_composite(mem_ctx,
-                                                 el_data,
-                                                 available,
-                                                 &el->data.composite);
-                       break;
+                       DBG_ERR("recursive composite tokens in conditional "
+                               "ACEs are not currently supported\n");
+                       goto error;
                default:
                        goto error;
                }