s4: dSHeuristics syntax check

Andrew Bartlett abartlet at samba.org
Tue Nov 2 23:25:17 MDT 2010


On Tue, 2010-11-02 at 22:23 +0200, Nadezhda Ivanova wrote:
> Hi Andrew,
> I am only checking modifies because this is an attribute of the Directory
> Service object, of which we only have one per forest I think, and by default
> this attribute is missing. It seems an overkill to check every time when
> adding an object if we have dsHeurisrics, as it is very unlikely that we
> will be adding a second Directory Service object. It is no problem to check
> adds as well, but I think it will just be overhead.  The tenthChar is as
> documented in MS-ADTS, it and all the other character positions are defined
> in flags.h.

I still think we should do out best to always ensure we always validate
data entered into the directory. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20101103/8a32d5b2/attachment.pgp>


More information about the samba-technical mailing list