summaryrefslogtreecommitdiff
path: root/source4/setup
diff options
context:
space:
mode:
authorRalph Boehme <slow@samba.org>2018-02-16 15:30:13 +0100
committerKarolin Seeger <kseeger@samba.org>2018-03-13 10:25:39 +0100
commitf797e86896397b9dccccfd3a235f3537ced6cb37 (patch)
tree3fb24812991b6a1050ba049621bc35b58fdb2b2c /source4/setup
parentc5a663f754148af6fb7e47f5990b93b55abd7342 (diff)
downloadsamba-f797e86896397b9dccccfd3a235f3537ced6cb37.tar.gz
CVE-2018-1057: s4:dsdb/samdb: define DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID control
Will be used to pass "user password change" vs "password reset" from the ACL to the password_hash module, ensuring both modules treat the request identical. Bug: https://bugzilla.samba.org/show_bug.cgi?id=13272 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
Diffstat (limited to 'source4/setup')
-rw-r--r--source4/setup/schema_samba4.ldif1
1 files changed, 1 insertions, 0 deletions
diff --git a/source4/setup/schema_samba4.ldif b/source4/setup/schema_samba4.ldif
index 5dcbe9ac5ff..0e2b6ecceb6 100644
--- a/source4/setup/schema_samba4.ldif
+++ b/source4/setup/schema_samba4.ldif
@@ -226,6 +226,7 @@
#Allocated: LDB_CONTROL_RECALCULATE_RDN_OID 1.3.6.1.4.1.7165.4.3.30
#Allocated: DSDB_CONTROL_FORCE_RODC_LOCAL_CHANGE 1.3.6.1.4.1.7165.4.3.31
#Allocated: DSDB_CONTROL_INVALID_NOT_IMPLEMENTED 1.3.6.1.4.1.7165.4.3.32
+#Allocated: DSDB_CONTROL_PASSWORD_ACL_VALIDATION_OID 1.3.6.1.4.1.7165.4.3.33
# Extended 1.3.6.1.4.1.7165.4.4.x