dsdb: Check for userPassword support after loading the databases
authorAndrew Bartlett <abartlet@samba.org>
Wed, 11 Apr 2018 10:49:31 +0000 (22:49 +1200)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 12 Apr 2018 03:15:16 +0000 (05:15 +0200)
commit5c7973e9ba5671aa78525b335038b5ca8bf54aa3
tree0df84a2148fe18f8f72ffbe1cbb25f1ea13552fb
parent82beaf868f252c4bc975ddafd80240af6f679b83
dsdb: Check for userPassword support after loading the databases

The net result of this is only that userPassword values (which were
world readable when set) would still be visible after userPassword
started setting the main DB password.

In AD, those values become hidden once the dSHeuristics bit is set,
but Samba lost that when fixing a performance issue with
f26a2845bd42e580ddeaf0eecc9b46b823a0c6bc

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13378

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
selftest/knownfail.d/dsheuristics_userPassword [new file with mode: 0644]
source4/dsdb/samdb/ldb_modules/acl.c