1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
samba-mirror/source4/rpc_server/drsuapi
Andrew Tridgell 4cc6b5a69b s4-drs: bring us much closer to the docs for DRS secret replication
The rules for when a RODC can replicate secrets are:

 - it can always replicate its own acct
 - it can also replicate its krbtgt acct
 - it can't replicate other krbtgt accts
 - it can't replicate interdomain trust accounts
 - it can't replicate users in the denied group list
 - it can replicate users in the allowed group list

otherwise it can't replicate

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20 20:34:11 +10:00
..
addentry.c s4-drs: added domain_sid to DRS security checks 2010-08-17 21:21:50 +10:00
dcesrv_drsuapi.c s4-drs: added sam_ctx_system on DRS bind state 2010-08-20 20:34:11 +10:00
dcesrv_drsuapi.h s4-drs: added sam_ctx_system on DRS bind state 2010-08-20 20:34:11 +10:00
drsutil.c s4-drs: added domain_sid to DRS security checks 2010-08-17 21:21:50 +10:00
getncchanges.c s4-drs: bring us much closer to the docs for DRS secret replication 2010-08-20 20:34:11 +10:00
updaterefs.c s4:security Remove use of user_sid and group_sid from struct security_token 2010-08-18 09:50:38 +10:00
writespn.c s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags 2010-02-16 21:10:50 +11:00