[PATCH 1/2] Set os attribute and version during domain join

[Kenneth MacDonald]

Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Matthew Geddes wrote:
>
>   
>> I've just added some crude test code to winbindd that 
>> attempts to modify/replace operatingSystem and
>> operatingSystemVersion using the machine's credentials.
>> I bind as host$ (which wireshark suggests succeeds). I
>> then do a search for my computer account to find the DN,
>> which is returned fine. I attempt a modify, but get 
>> back an INSUFF_ACCESS_RIGHTS message. The data in the
>> packet, and the tracewrites indicate that the attributes
>> are all correct (no stupid data/termination problems
>> due to sleep-coding).
>>
>> Does anyone have a packet capture of Windows updating 
>> these attributes in Active Directory?
>>     
>
> Thanks Matthew.  This makes me feel better.  Everyone says
> that Windows updates the attributes but no one has every
> given me a trace to prove that.  I have never seen it myself
> and I've looked a good bit :-)
>   
I know this isn't a packet trace, but we performed the following test ...

Use dscl on a Mac to change the operatingSystem, operatingSystemVersion 
and operatingSystemServicePack attributes to "foobar" on a currently 
bound MS Windows XP client in a 2003AD.

Rebooted the XP client.  All three attributes got reset as soon as the 
"Configuring network connections ..." stage of the boot was complete.

We had been worried that XP perhaps only set these attributes at join 
and service pack install time, but I think this proves it changes it.

Do you still want us to supply a network trace of this?

Cheers,

Kenny.

--
Desktop Services, Information Services, The University of Edinburgh.