[cifs-protocol] behavior of windows with/without the DS-Replication-Get-Changes-In-Filtered-Set right
bburgin at microsoft.com
Thu Feb 10 14:51:16 MST 2011
[dochelp to bcc]
I am working on three of your issues right now, including this one:
111020102754615: [MS-ADTS]: Behavior of windows with/without the DS-Replication-Get-Changes-In-Filtered-Set right
111012761781621: [MS-DRSR] Dirsync control
111020105939834: [MS-ADTS]: Server behavior with dirsync control when the search base is not a root of a nc
From: Matthieu Patou [mailto:mat at samba.org]
Sent: Thursday, February 10, 2011 1:43 PM
To: mat at samba.org
Cc: pfif at tridgell.net; Interoperability Documentation Help; cifs-protocol at samba.org
Subject: Re: [cifs-protocol] behavior of windows with/without the DS-Replication-Get-Changes-In-Filtered-Set right
It seems I didn't have any news on this point.
Can you provide updates ?
On 01/02/2011 01:35, Matthieu Patou wrote:
> Dear doc team,
> This page,
> "If the flag is not specified, the server MUST do the following:
> If the server is running Windows Server(r) 2008 operating system or
> Windows Server(r) 2008 R2 operating system and the client has requested
> any attributes in the filtered attribute set, the server checks that
> the client has the DS-Replication-Get-Changes-In-Filtered-Set control
> access right (section 188.8.131.52.7.71
> ) or else returns the /insufficientAccessRights/ error to the client."
> The flag that we are talking about is LDAP_SERVER_DIRSYNC_OID.
> I either have some problems to understand the meaning of "requested
> any attributes in the filtered attribute set" or I have problems
> requesting them or something else as I'm unable to test this
> particular case.
> In w2k8r2 I created a user and granted him DS-Replication-Get-Changes,
> but not DS-Replication-Get-Changes-In-Filtered-Set so I'm expecting
> that when I add the filter "(samaccountname=ad*)", in the ldap
> request, that the system will reject my request but it's not so I'm
> wondering what is exactly "the filtered attribute set" ? Can you
> clarify this point ?
> Matthieu Patou.
Samba Team http://samba.org
Private repo http://git.samba.org/?p=mat/samba.git;a=summary
More information about the cifs-protocol