From: Tim Beale Date: Tue, 13 Nov 2018 00:19:04 +0000 (+1300) Subject: CVE-2018-16857 dsdb/util: Fix lockOutObservationWindow for PSOs X-Git-Tag: tdb-1.3.17~590 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=13014aea13a77f6a75ab948e2a29d814ebd9dd22;p=thirdparty%2Fsamba.git CVE-2018-16857 dsdb/util: Fix lockOutObservationWindow for PSOs Fix a remaining place where we were trying to read the msDS-LockoutObservationWindow as an int instead of an int64. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13683 Signed-off-by: Tim Beale Reviewed-by: Andrew Bartlett --- diff --git a/selftest/knownfail.d/password_lockout b/selftest/knownfail.d/password_lockout deleted file mode 100644 index a4e37a84c21..00000000000 --- a/selftest/knownfail.d/password_lockout +++ /dev/null @@ -1,2 +0,0 @@ -samba4.ldap.password_lockout.python\(ad_dc_ntvfs\).__main__.PasswordTestsWithDefaults.test_pso_login_lockout_krb5\(ad_dc_ntvfs\) -samba4.ldap.password_lockout.python\(ad_dc_ntvfs\).__main__.PasswordTestsWithDefaults.test_pso_login_lockout_ntlm\(ad_dc_ntvfs\) diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c index dcbfc8c60a3..50c96f7c781 100644 --- a/source4/dsdb/common/util.c +++ b/source4/dsdb/common/util.c @@ -5368,9 +5368,9 @@ int samdb_result_effective_badPwdCount(struct ldb_context *sam_ldb, if (res != NULL) { lockOutObservationWindow = - ldb_msg_find_attr_as_int(res->msgs[0], - "msDS-LockoutObservationWindow", - 0); + ldb_msg_find_attr_as_int64(res->msgs[0], + "msDS-LockoutObservationWindow", + 0); talloc_free(res); } else {