s4-dsdb: Require that the NTDS object is an nTDSDSA objectclass

[samba.git] / source4 / dsdb / common / util.c

diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c
index fae5df150e656c186f5ee329b8e4b1092a1c472c..0167267d370ab5aa58b536dcc2ee7a70c703b6ba 100644 (file)
--- a/source4/dsdb/common/util.c
+++ b/source4/dsdb/common/util.c
@@ -3574,7 +3574,7 @@ int samdb_get_ntds_obj_by_guid(TALLOC_CTX *mem_ctx,
                          LDB_SCOPE_SUBTREE,
                          attrs,
                          DSDB_SEARCH_ONE_ONLY,
-                         "objectGUID=%s",
+                         "(&(objectGUID=%s)(objectClass=nTDSDSA))",
                          guid_str);
        if (ret != LDB_SUCCESS) {
                return ret;