CVE-2018-1057: s4:dsdb/acl: run password checking only once
authorRalph Boehme <slow@samba.org>
Wed, 14 Feb 2018 18:15:49 +0000 (19:15 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 13 Mar 2018 09:23:10 +0000 (10:23 +0100)
commitf8ff72d75bef5552eb00852a3012db44261d423f
treece994e2f1752af892a75eb2450b02cfa57c01fc1
parent4e30547371cf9e38cd7a219dd43c9bc5c7a2a7fb
CVE-2018-1057: s4:dsdb/acl: run password checking only once

This is needed, because a later commit will let the acl module add a
control to the change request msg and we must ensure that this is only
done once.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13272

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/dsdb/samdb/ldb_modules/acl.c