RODC and the samba_kcc code

[Stefan (metze) Metzmacher]

Am 29.07.2014 12:22, schrieb Andrew Bartlett:
> On Tue, 2014-07-29 at 12:19 +0200, Stefan (metze) Metzmacher wrote:
>> Am 29.07.2014 12:16, schrieb Andrew Bartlett:
> 
>>> I've been working with Garming to get wintest up and going again, and a
>>> successful wintest run would be part of my criteria, so we know we
>>> didn't break something subtle.  We already found other subtle and
>>> unexpected breakages, such as the python samba_kcc breaking RODC
>>> support, for example.
>>
>> Is it related to https://bugzilla.samba.org/show_bug.cgi?id=10697 ?
> 
> It seems it is up to the KCC to set the SPECIAL_SECRETS_PROCESSING mode
> in the repsFrom, and the samba_kcc has no such code, while the old
> implementation does check an is_rodc flag.  
> 
> That said, the other bugs probably don't help either.

So what should we do with samba_kcc for 4.2? I'd revert to the old kcc.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 246 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20140729/aec3d701/attachment.pgp>