attribute modification: problem comming soon

Andrew Bartlett abartlet at
Tue Aug 18 02:42:50 MDT 2009

On Tue, 2009-08-18 at 12:38 +0400, Matthieu Patou wrote:
> Hi andrew and nadezhda,
> A couple of weeks ago I tweaked my S4 in tests to get rid of the 
> verification in kludge_acl.
> I found that windows 2008 is willing to modify some of his attributes 
> and for at least one of them: servicePrincipalName it keeps modifying it 
> willing to put again and again the same values ie.
> servicePrincipalName: TERMSRV/smbtstvz01.smb4.tst
> servicePrincipalName: TERMSRV/SMBTSTVZ01
> Currently samba4 do not appreciate this and return an error maybe the 
> behavior should be modified to manage this behavior ?

What does windows do?  What controls are present on the request
(permissive modify in particular).


Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team 
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <>

More information about the samba-technical mailing list