Clarify how we are doing the 'this is a rootdse query' check.

(This used to be commit 8dfba3160cc4bc518f3ad8570d104e5baae784ca)

diff --git a/source4/dsdb/samdb/ldb_modules/rootdse.c b/source4/dsdb/samdb/ldb_modules/rootdse.c
index 75f99a139d797b17cbcc57be97fd36f1fd440818..7414d36973e16076c29c5d29533befb91e966b0e 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/rootdse.c
+++ b/source4/dsdb/samdb/ldb_modules/rootdse.c
@@ -263,9 +263,10 @@ static int rootdse_search(struct ldb_module *module, struct ldb_request *req)
        struct ldb_request *down_req;
        int ret;
 
-       /* see if its for the rootDSE */
+       /* see if its for the rootDSE - only a base search on the "" DN qualifies */
        if (req->op.search.scope != LDB_SCOPE_BASE ||
            ( ! ldb_dn_is_null(req->op.search.base))) {
+               /* Otherwise, pass down to the rest of the stack */
                return ldb_next_request(module, req);
        }