attribute modification: problem comming soon

[Andrew Bartlett]

On Tue, 2009-08-18 at 12:38 +0400, Matthieu Patou wrote:
> Hi andrew and nadezhda,
> 
> A couple of weeks ago I tweaked my S4 in tests to get rid of the 
> verification in kludge_acl.
> 
> I found that windows 2008 is willing to modify some of his attributes 
> and for at least one of them: servicePrincipalName it keeps modifying it 
> willing to put again and again the same values ie.
> 
> servicePrincipalName: TERMSRV/smbtstvz01.smb4.tst
> servicePrincipalName: TERMSRV/SMBTSTVZ01
> 
> Currently samba4 do not appreciate this and return an error maybe the 
> behavior should be modified to manage this behavior ?

What does windows do?  What controls are present on the request
(permissive modify in particular).

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20090818/58bd1721/attachment.pgp>