From 100ec32abad4e67793f1b5e55a890a41c0c9730b Mon Sep 17 00:00:00 2001
From: Andrew Bartlett <abartlet@samba.org>
Date: Thu, 19 Feb 2015 10:20:48 +1300
Subject: [PATCH] samba_kcc: Do not attempt to modify connections on a RODC,
 replicated attributes are read only

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
---
 source4/scripting/bin/samba_kcc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source4/scripting/bin/samba_kcc b/source4/scripting/bin/samba_kcc
index 11bbd9c397e..289c5e931e9 100755
--- a/source4/scripting/bin/samba_kcc
+++ b/source4/scripting/bin/samba_kcc
@@ -377,7 +377,7 @@ class KCC(object):
                     cn_conn.to_be_deleted = True
 
 
-        if opts.readonly:
+        if mydsa.is_ro() or opts.readonly:
             for dnstr, connect in mydsa.connect_table.items():
                 if connect.to_be_deleted:
                     logger.info("TO BE DELETED:\n%s" % connect)
-- 
2.11.4.GIT