msDS-isRODC implementation

Andrew Bartlett abartlet at
Thu Apr 29 04:21:43 MDT 2010

On Thu, 2010-04-29 at 12:18 +0300, Anatoliy Atanasov wrote:
> Hi Andrew,
> I pushed the implementation of msDS-isRODC here:;a=shortlog;h=refs/heads/wip_msds_isrodc
> Please take a look at construct_msds_isrodc_with_dn. There i get the objectCategory for the object for which i have to construct msDS-isRODC and then i do another search on the schema for the distinguishedName of the nTDSDSA class.
> Is there a way to optimize the second read? Get the distinguishedName from schema cache, probably?

Yes, you can look up the schema by objectCategory DN - just get the
first component an use dsdb_class_by_cn()

If you also searched on objectCategory in the first search, then for
that case you should be able to avoid the second search entirely for
computer account objects. 

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <>

More information about the samba-technical mailing list