CVE-2020-25718 s4-rpc_server: Obtain the user tokenGroups earlier
authorAndrew Bartlett <abartlet@samba.org>
Thu, 30 Sep 2021 22:09:48 +0000 (11:09 +1300)
committerJule Anger <janger@samba.org>
Mon, 8 Nov 2021 09:52:12 +0000 (10:52 +0100)
commit0a3ebd1d1b92a865b632c44d211facd1a3bf58a9
tree7a2bcfbd333aa0a511da2dd49f7d5a5120a0c0fe
parent4b78fe5c13b2fdb66d0c186829bfb9c064deac50
CVE-2020-25718 s4-rpc_server: Obtain the user tokenGroups earlier

This will allow the creation of a common helper routine that
takes the token SID list (from tokenGroups or struct auth_user_info_dc)
and returns the allowed/denied result.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
source4/rpc_server/drsuapi/getncchanges.c
source4/rpc_server/netlogon/dcerpc_netlogon.c