[PATCH] s4/dsdb: dsdb_validate_invocation_id() should validate by objectGUID

[Andrew Bartlett]

On Tue, 2010-04-27 at 04:53 +0300, Kamen Mazdrashki wrote:
> Could you please take a look at following patches:
> 
> http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=c0e57546335376457ca985cea98df6a70a0f875d
> <http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=c0e57546335376457ca985cea98df6a70a0f875d>
> http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=b796836b5eede56c9945d2562b2b9a5c525423c8
> <http://gitweb.samba.org/?p=kamenim/samba.git;a=commitdiff;h=b796836b5eede56c9945d2562b2b9a5c525423c8>(last
> 2 commits from:
> http://gitweb.samba.org/?p=kamenim/samba.git;a=shortlog;h=refs/heads/vampire-test-wip
> )

Looking at that branch, we should *not* join as a DC, but as a
workstation and then upgrade.  Similarly, we should not set dNSHostName
unless you have seen windows do exactly that call. 

I know it looks like it fixes it, but metze did a lot of work to make
this exactly the same as what windows did, packet for packet.  We should
avoid disturbing that. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100427/4fd75edb/attachment.pgp>