CVE-2020-25718 s4-rpc_server: Obtain the user tokenGroups earlier
authorAndrew Bartlett <abartlet@samba.org>
Thu, 30 Sep 2021 22:09:48 +0000 (11:09 +1300)
committerJule Anger <janger@samba.org>
Mon, 8 Nov 2021 09:46:45 +0000 (10:46 +0100)
commitde34a5bb5349e8bfb578209766aa464009f45da4
tree0059cd019d8b0a9d40ec701f00baf969a07bdf7c
parentb57045193a947a2c7b2fbb2ec5284265806b24ce
CVE-2020-25718 s4-rpc_server: Obtain the user tokenGroups earlier

This will allow the creation of a common helper routine that
takes the token SID list (from tokenGroups or struct auth_user_info_dc)
and returns the allowed/denied result.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14558

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Joseph Sutton <josephsutton@catalyst.net.nz>
source4/rpc_server/drsuapi/getncchanges.c
source4/rpc_server/netlogon/dcerpc_netlogon.c