[PATCH] s4/dsdb: dsdb_validate_invocation_id() should validate by objectGUID

[Andrew Bartlett]

On Mon, 2010-04-26 at 00:31 +0300, Kamen Mazdrashki wrote:
> Tridge, Andrew,
> 
> Could you please review following patch:
> http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=e9194af939aa47aea67c074853fd228acb3ac03b
> 
> <http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=e9194af939aa47aea67c074853fd228acb3ac03b>During
> vampire-test-fix effor, I've found this function actually should be
> searching DSA's record by objectGUID
> as it is objectGUID that is send in DRSUpdateRefs() call.

Have you check that this is also the case with Windows clients?  (Samba
may be getting this wrong).  Perhaps Windows doesn't actually check
this?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100426/14ea6801/attachment.pgp>