s4-samldb: Do not allow deletion of objects with RID < 1000
authorNadezhda Ivanova <nivanova@symas.com>
Mon, 14 Oct 2013 09:38:10 +0000 (12:38 +0300)
committerNadezhda Ivanova <nivanova@samba.org>
Mon, 14 Oct 2013 11:31:50 +0000 (13:31 +0200)
commit13a10d43141c29dad61868b451c0c1dca82360de
treeec660ca94f27c085be55e5f85e6789a1a2437099
parent064433f265d2215389f2a377b6e8243318669b65
s4-samldb: Do not allow deletion of objects with RID < 1000

According to [MS-SAMR] 3.1.5.7 Delete Pattern we should not allow deletion
of security objects with RID < 1000. This patch will prevent deletion of
well-known accounts and groups.

Signed-off-by: Nadezhda Ivanova <nivanova@symas.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date(master): Mon Oct 14 13:31:50 CEST 2013 on sn-devel-104
python/samba/tests/samba3sam.py
source4/dsdb/samdb/ldb_modules/samldb.c
source4/dsdb/samdb/samdb.h
source4/dsdb/tests/python/sam.py
testdata/samba3/samba3.ldif