InstanceType work

[Nadezhda Ivanova]

Hi Andrew,
I don't see anything wrong with the patch, I suppose we could push it after
the instanceType has been moved up. I'm currently working to reproduce a
security check bug discovered during i/o lab, and will continue with the
instanceType when I'm done with it, shouldn't take long.

Regards,
Nadya


On Fri, Oct 11, 2013 at 6:11 AM, Andrew Bartlett <abartlet at samba.org> wrote:

> G'Day,
>
> It seems we both have work items around instanceType support, and I
> figured it would be worth noting down what needs to be done:
>
>  - We need tests to show that you can't just set any value on
> anything...
>  - We need tests for the creation of new naming contexts
>  - We need the changes I've made to acl.c (attached) and we need tests
>  - We need to move the instancetype module up the stack.  It needs to
> have code like the new_partition module, but up the stack at a point
> above acl, that does all the new-partition things.
>
> See MS-ATDS 3.1.1.5.2.8 NC-Add Operation for the full details of what is
> required.
>
> I need this because the subdomain join code needs this, and you had LDAP
> tests failing on this as well.  Between us I think we can probably get
> this in order.  (I'm trying to get enough of the subdomain support
> working that we can run a simple test in our selftest code to stop it
> breaking again, even if we don't fully support it yet).
>
> Thanks,
>
> Andrew Bartlett
> --
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
> Samba Developer, Catalyst IT                   http://catalyst.net.nz
>
>