From: Björn Baumbach <bb@sernet.de>
Date: Mon, 30 Dec 2019 12:57:26 +0000 (+0100)
Subject: python/samdb: validation of group member types for group member filter
X-Git-Tag: samba-4.12.0rc1~11
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a4d77bfd90d09b37b89f99042d9e0e3d5b102677;p=thirdparty%2Fsamba.git

python/samdb: validation of group member types for group member filter

Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Ralph Boehme <slow@samba.org>
---

diff --git a/python/samba/samdb.py b/python/samba/samdb.py
index 4606b607323..af3a7ddf96a 100644
--- a/python/samba/samdb.py
+++ b/python/samba/samdb.py
@@ -264,6 +264,12 @@ pwdLastSet: 0
         if 'all' in member_types:
             member_types = all_member_types
 
+        for member_type in member_types:
+            if member_type not in all_member_types:
+                raise Exception('Invalid group member type "%s". '
+                                'Valid types are %s and all.' %
+                                (member_type, ", ".join(all_member_types)))
+
         if 'user' in member_types:
             filter += ('(&(sAMAccountName=%s)(samAccountType=%d))' %
                        (ldb.binary_encode(member), dsdb.ATYPE_NORMAL_ACCOUNT))