svn commit: samba r12363 - in branches/SAMBA_4_0/source: auth dsdb/samdb

[tridge at samba.org]

Andrew,

 > >  - the objectClass needs to be added to the list of attributes to make
 > >    the check for objectClass=computer work
 > 
 > On the domain_ref object?  This just doesn't look right.

Indeed it looks strange, but that was the attribute list that is being
used when I traced back up the stack.

 > Ahh, I didn't know it was using the full name, but this still doesn't
 > look right.  Does the client set the dnsHostname?  Could we look at that
 > attribute rather than 'cn'?  

No, dnsHostname is not setup.

Here is the record for a join from a win2000 box:


dn: CN=W2K,CN=Computers,DC=bludom,DC=tridgell,DC=net
distinguishedName: CN=W2K,CN=Computers,DC=bludom,DC=tridgell,DC=net
sAMAccountName: W2K$
objectClass: computer
objectClass: user
distinguishedName: CN=TemplateMemberServer,CN=Templates,DC=bludom,DC=tridgell,DC=net
instanceType: 4
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
primaryGroupID: 513
accountExpires: -1
logonCount: 0
sAMAccountType: 0x30000001
objectCategory: CN=Computer,CN=Schema,CN=Configuration,DC=bludom,DC=tridgell,DC=net
whenCreated: 20051219120353.0Z
objectSid: S-1-5-21-1700789653-1060376436-214742836-1002
objectGUID: db3ad875-9ba0-4aba-adf1-05f7571b2126
CN: W2K
displayName: W2K$
userAccountControl: 4096
ntPwdHash:: m+l5/YKG22xFVCQXtmz0Gw==
pwdLastSet: 127794675050000000
msDS-KeyVersionNumber: 1
lmPwdHistory:: AAAAAAAAAAAAAAAAAAAAAA==
ntPwdHistory:: m+l5/YKG22xFVCQXtmz0Gw==
whenChanged: 20051219120505.0Z
name: W2K