From 15e5263c0ea0c1fc30573d3e62c956b3d412e4a3 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 23 Jan 2013 15:24:11 +0100 Subject: [PATCH] samba_upgradeprovision: fix resetting of 'nTSecurityDescriptor' on schema objects Without this schema_data_modify() will reject updates to schema objects by default. Signed-off-by: Stefan Metzmacher Reviewed-by: Andrew Bartlett (cherry picked from commit f51248339ae7ba9843e477493a69b0c4f647935a) --- source4/scripting/bin/samba_upgradeprovision | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/scripting/bin/samba_upgradeprovision b/source4/scripting/bin/samba_upgradeprovision index 9daabe318fa..9898333bfe5 100755 --- a/source4/scripting/bin/samba_upgradeprovision +++ b/source4/scripting/bin/samba_upgradeprovision @@ -1360,7 +1360,7 @@ def rebuild_sd(samdb, names): descr = get_empty_descriptor(names.domainsid) delta["nTSecurityDescriptor"] = MessageElement(descr, FLAG_MOD_REPLACE, "nTSecurityDescriptor") - samdb.modify(delta, ["sd_flags:1:%d" % sd_flags,"relax:0"]) + samdb.modify(delta, ["sd_flags:1:%d" % sd_flags,"relax:0","local_oid:%s:0" % dsdb.DSDB_CONTROL_DBCHECK]) except LdbError, e: samdb.transaction_cancel() res = samdb.search(expression="objectClass=*", base=str(delta.dn), -- 2.11.4.GIT