msDS-isRODC implementation

Andrew Bartlett abartlet at samba.org
Thu Apr 29 04:21:43 MDT 2010


On Thu, 2010-04-29 at 12:18 +0300, Anatoliy Atanasov wrote:
> Hi Andrew,
> 
> I pushed the implementation of msDS-isRODC here: http://git.samba.org/?p=anatoliy/anatoliy.git;a=shortlog;h=refs/heads/wip_msds_isrodc
> Please take a look at construct_msds_isrodc_with_dn. There i get the objectCategory for the object for which i have to construct msDS-isRODC and then i do another search on the schema for the distinguishedName of the nTDSDSA class.
> Is there a way to optimize the second read? Get the distinguishedName from schema cache, probably?

Yes, you can look up the schema by objectCategory DN - just get the
first component an use dsdb_class_by_cn()

If you also searched on objectCategory in the first search, then for
that case you should be able to avoid the second search entirely for
computer account objects. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100429/7633fb67/attachment.pgp>


More information about the samba-technical mailing list