s4:dsdb/operational: fix stripping of the nTSecurityDescriptor attribute
commit6bc2caed8b3f153f92af013275f39c803f886a22
authorStefan Metzmacher <metze@samba.org>
Thu, 6 Dec 2012 14:56:26 +0000 (6 15:56 +0100)
committerMichael Adam <obnox@samba.org>
Mon, 10 Dec 2012 12:53:48 +0000 (10 13:53 +0100)
tree2e9edccf65956467c9f76a03fccbbf9bb3e4c05f
parent22bb2fd868b8df2244b801aeaa515a8a4036bce8
s4:dsdb/operational: fix stripping of the nTSecurityDescriptor attribute

If the sd_flags control is specified, we should return nTSecurityDescriptor
only if the client asked for all attributes.

If there's a list of only explicit attribute names, we should ignore
the sd_flags control.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
source4/dsdb/samdb/ldb_modules/operational.c