Attachment 16993 Details for Bug 14903 – backport to 4.15

[patch] backport to 4.15

0001-v4.15-IPA-DC-add-missing-checks.patch (text/plain), 1.73 KB, created by Alexander Bokovoy on 2021-11-13 08:09:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alexander Bokovoy

Created: 2021-11-13 08:09:48 UTC

Size: 1.73 KB

patch

obsolete

>From 9fcb21d4a34342ecea8ad8d374bbc5ee49a585ce Mon Sep 17 00:00:00 2001
>From: Alexander Bokovoy <ab@samba.org>
>Date: Fri, 12 Nov 2021 19:06:01 +0200
>Subject: [PATCH] IPA DC: add missing checks
>
>When introducing FreeIPA support, two places were forgotten:
>
> - schannel gensec module needs to be aware of IPA DC
> - _lsa_QueryInfoPolicy should treat IPA DC as PDC
>
>BUG: https://bugzilla.samba.org/show_bug.cgi?id=14903
>
>Signed-off-by: Alexander Bokovoy <ab@samba.org>
>Reviewed-by: Guenther Deschner <gd@samba.org>
>
>Autobuild-User(master): Alexander Bokovoy <ab@samba.org>
>Autobuild-Date(master): Sat Nov 13 07:01:26 UTC 2021 on sn-devel-184
>
>(cherry picked from commit c69b66f649c1d47a7367f7efe25b8df32369a3a5)
>---
> auth/gensec/schannel.c              | 1 +
> source3/rpc_server/lsa/srv_lsa_nt.c | 1 +
> 2 files changed, 2 insertions(+)
>
>diff --git a/auth/gensec/schannel.c b/auth/gensec/schannel.c
>index 0cdae141ead..6ebbe8f3179 100644
>--- a/auth/gensec/schannel.c
>+++ b/auth/gensec/schannel.c
>@@ -1080,6 +1080,7 @@ static NTSTATUS schannel_server_start(struct gensec_security *gensec_security)
> 	case ROLE_DOMAIN_BDC:
> 	case ROLE_DOMAIN_PDC:
> 	case ROLE_ACTIVE_DIRECTORY_DC:
>+	case ROLE_IPA_DC:
> 		return NT_STATUS_OK;
> 	default:
> 		return NT_STATUS_NOT_IMPLEMENTED;
>diff --git a/source3/rpc_server/lsa/srv_lsa_nt.c b/source3/rpc_server/lsa/srv_lsa_nt.c
>index d6d606ddeca..36774be3e32 100644
>--- a/source3/rpc_server/lsa/srv_lsa_nt.c
>+++ b/source3/rpc_server/lsa/srv_lsa_nt.c
>@@ -683,6 +683,7 @@ NTSTATUS _lsa_QueryInfoPolicy(struct pipes_struct *p,
> 		switch (lp_server_role()) {
> 			case ROLE_DOMAIN_PDC:
> 			case ROLE_DOMAIN_BDC:
>+			case ROLE_IPA_DC:
> 				name = get_global_sam_name();
> 				sid = dom_sid_dup(p->mem_ctx, get_global_sam_sid());
> 				if (!sid) {
>-- 
>2.33.1
>

Flags:

asn: review+
gd: review+

Actions: View

Attachments on bug 14903: 16992 | 16993