InstanceType work

Nadezhda Ivanova nivanova at
Sun Oct 13 12:25:23 MDT 2013

Hi Andrew,
I don't see anything wrong with the patch, I suppose we could push it after
the instanceType has been moved up. I'm currently working to reproduce a
security check bug discovered during i/o lab, and will continue with the
instanceType when I'm done with it, shouldn't take long.


On Fri, Oct 11, 2013 at 6:11 AM, Andrew Bartlett <abartlet at> wrote:

> G'Day,
> It seems we both have work items around instanceType support, and I
> figured it would be worth noting down what needs to be done:
>  - We need tests to show that you can't just set any value on
> anything...
>  - We need tests for the creation of new naming contexts
>  - We need the changes I've made to acl.c (attached) and we need tests
>  - We need to move the instancetype module up the stack.  It needs to
> have code like the new_partition module, but up the stack at a point
> above acl, that does all the new-partition things.
> See MS-ATDS NC-Add Operation for the full details of what is
> required.
> I need this because the subdomain join code needs this, and you had LDAP
> tests failing on this as well.  Between us I think we can probably get
> this in order.  (I'm trying to get enough of the subdomain support
> working that we can run a simple test in our selftest code to stop it
> breaking again, even if we don't fully support it yet).
> Thanks,
> Andrew Bartlett
> --
> Andrew Bartlett
> Authentication Developer, Samba Team 
> Samba Developer, Catalyst IT         

More information about the samba-technical mailing list