Anyone remember the rules on links to deleted objects in AD?

[Matthieu Patou]

On 05/16/2013 05:09 AM, Andrew Bartlett wrote:
> samba-tool dbcheck objects to links to deleted objects, but
> repl_meta_data seems to only remove links to recycled objects.
Not only they will also be removed when a tombstone object is removed 
because its lifetime (if I call it this way)
> This seems to be behind the dbcheck failure that is preventing me
> getting my other drs patches in.  Can someone help remind me what the
> rules are here?  I'm presuming the links should be auto-magically
> hidden, but not deleted?
Normally if the link points to a deleted object it's not shown in a 
search unless you ask for show-deleted or show-recycled.
We need to keep this because a DC replying to a getNCChanges needs to 
have a way to understand that it has to notify the other DC that this 
link is pointing a tombstone object so that the other DC can also do the 
modification.

>
> Currently extended_dn_out only seems to do that for one way links, and
> of course samba-tool dbcheck sets all the 'show me the guts' controls
> anyway...
>
> Thanks,
>
> Andrew Bartlett
Matthieu.