CVE-2018-1057: s4:dsdb/acl: run password checking only once
commitc5a663f754148af6fb7e47f5990b93b55abd7342
authorRalph Boehme <slow@samba.org>
Wed, 14 Feb 2018 18:15:49 +0000 (14 19:15 +0100)
committerKarolin Seeger <kseeger@samba.org>
Tue, 13 Mar 2018 09:25:39 +0000 (13 10:25 +0100)
tree77abef88cd3a9a05e366d8c0057ddb0e67f42dd6
parent7cc374973406c49130fff019de26bdf0db48f494
CVE-2018-1057: s4:dsdb/acl: run password checking only once

This is needed, because a later commit will let the acl module add a
control to the change request msg and we must ensure that this is only
done once.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=13272

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
source4/dsdb/samdb/ldb_modules/acl.c