[Samba4] Duplicate ntSecurityDescriptor during provisioning

[Endi Sukma Dewata]

Hi Nadya,

I'm using the code from the master branch that I pulled on Tuesday.
It seems to be working just fine with the default backend (the quick
test completed successfully), only when I used the OpenLDAP backend it
then would fail. The new value seems to be added by the
descriptor_do_add() in source4/dsdb/samdb/ldb_modules/descriptor.c.

Any idea? Please let me know if you need any other info. Thanks!

--
Endi S. Dewata

----- "Nadezhda Ivanova" <nadezhda.ivanova at postpath.com> wrote:

> Hi,
> Are you using alpha8 or the current master? It could be related to a
> patch regarding security descriptors that we pushed Monday evening.
> 
> Regards,
> Nadya
> ----- Original Message -----
> > From: samba-technical-bounces at lists.samba.org
> <samba-technical-bounces at lists.samba.org>
> > To: Andrew Bartlett <abartlet at samba.org>, Endi Sukma Dewata
> <edewata at redhat.com>
> > Cc: Dmitri Pal <dpal at redhat.com>, samba-technical at lists.samba.org
> <samba-technical at lists.samba.org>
> > Sent: Wednesday, September 16, 2009 3:38:59 PM GMT-0800
> America;Los_Angeles
> > Subject: [Samba4] Duplicate ntSecurityDescriptor during
> provisioning
> 
> > > Andrew,
> > 
> > I'm trying to run the test against OpenLDAP to verify my environment
> 
> > before testing FDS again. I found that the provisioning script
> failed 
> > to load the first entry in provision_group_policy.ldif. Here is the
> 
> > error message:
> > 
> > _ldb.LdbError: (19, 'LDAP error 19 LDAP_CONSTRAINT_VIOLATION -  
> > <nTSecurityDescriptor: multiple values provided> <>')
> > 
> > In the LDIF file the entry only has 1 nTSecurityDescriptor value,
> but 
> > when I check the attribute in ildap_add() it actually has 2 values.
> > 
> > Do you have any idea? Thanks.
> > 
> > --
> > Endi S. Dewata