[Patches] Expanded group memberships on boundaries of outgoing trusts (bugs #13299, #13300, #13307)

Andrew Bartlett abartlet at samba.org
Thu Mar 1 17:54:18 UTC 2018


On Thu, 2018-03-01 at 13:17 +0100, Stefan Metzmacher wrote:
> 
> 
> The strange thing is that the resulting object in the database
> has a GUID part in the defaultObjectCategory attribute I checked
> it in
> sam.ldb.d/CN\=SCHEMA\,CN\=CONFIGURATION\,DC\=SAMBA2008R2\,DC\=EXAMPLE\,DC\=COM.ldb
> I'm wondering where this got added (and it's not get_parsed_dns()).
> 
> I'm also wondering why the following fails against (even older) samba
> versions:
> 
> dn: CN=SelfReference,CN=Users,DC=addom,DC=samba,DC=example,DC=com
> objectClass: group
> member: CN=SelfReference,CN=Users,DC=addom,DC=samba,DC=example,DC=com
> 
> while it seems to work for the defaultObjectCategory attribute.

There is magic for defaultObjectCategory that fills in the GUID from
the schema.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba




More information about the samba-technical mailing list