s4/ldb_modules/acl.c: Fix calculation for samAccountName string len

[metze/samba/wip.git] / source4 / dsdb / samdb / ldb_modules / acl.c

diff --git a/source4/dsdb/samdb/ldb_modules/acl.c b/source4/dsdb/samdb/ldb_modules/acl.c
index 69ff2aae9426333d3df258924bcb6589a4c17517..21843ad6e0c7828b774a6a67a68c0ac83f6076c7 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/acl.c
+++ b/source4/dsdb/samdb/ldb_modules/acl.c
@@ -507,7 +507,7 @@ static int acl_validate_spn_value(TALLOC_CTX *mem_ctx,
        }
        /* instanceName can be samAccountName without $ or dnsHostName
         * or "ntds_guid._msdcs.forest_domain for DC objects */
-       if (strncasecmp(instanceName, samAccountName, strlen(samAccountName - 1)) == 0) {
+       if (strncasecmp(instanceName, samAccountName, strlen(samAccountName) - 1) == 0) {
                goto success;
        } else if (strcasecmp(instanceName, dnsHostName) == 0) {
                goto success;