dsdb: Add a more explicit error message for constructed attributes

Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>

diff --git a/source4/dsdb/samdb/ldb_modules/objectclass.c b/source4/dsdb/samdb/ldb_modules/objectclass.c
index 475b53a7cb01de341f6ff687e146bd958927db88..8bcac1153bbe30477a8cd0138b2cc5a4929f4faa 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/objectclass.c
+++ b/source4/dsdb/samdb/ldb_modules/objectclass.c
@@ -364,6 +364,7 @@ static int fix_check_attributes(struct ldb_context *ldb,
 
                        /* We have to deny write operations on constructed attributes */
                        if ((attribute->systemFlags & DS_FLAG_ATTR_IS_CONSTRUCTED) != 0) {
+                               ldb_asprintf_errstring(ldb, "attribute %s is constructed", msg->elements[i].name);
                                if (op == LDB_ADD) {
                                        return LDB_ERR_UNDEFINED_ATTRIBUTE_TYPE;
                                } else {