]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
auth: remove sid-filtering comment in make_user_info_dc_netlogon_validation
authorStefan Metzmacher <metze@samba.org>
Wed, 29 Jan 2025 08:36:32 +0000 (09:36 +0100)
committerStefan Metzmacher <metze@samba.org>
Fri, 14 Feb 2025 14:21:32 +0000 (14:21 +0000)
sid filtering will be done at a different level...

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jennifer Sutton <jennifersutton@catalyst.net.nz>
auth/auth_sam_reply.c

index 8c0ebe5f156c5599dc47cf4d435e8a325738da6c..94e2c8b08eee70a9f9874015910cf7c29efc95ef 100644 (file)
@@ -747,12 +747,6 @@ NTSTATUS make_user_info_dc_netlogon_validation(TALLOC_CTX *mem_ctx,
                user_info_dc->num_sids++;
        }
 
-       /* Copy 'other' sids.  We need to do sid filtering here to
-          prevent possible elevation of privileges.  See:
-
-           http://www.microsoft.com/windows2000/techinfo/administration/security/sidfilter.asp
-         */
-
        /*
         * The IDL layer would be a better place to check this, but to
         * guard the integer addition below, we double-check