samba_kcc: respect kcc.read_only flag on RODC

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/kcc/__init__.py b/python/samba/kcc/__init__.py
index 9cf077b6afa90a03e7fe919194f9572cf00ef1b2..5df3e788227d7a9f577393f2a6d05aff6ed9d203 100644 (file)
--- a/python/samba/kcc/__init__.py
+++ b/python/samba/kcc/__init__.py
@@ -913,7 +913,7 @@ class KCC(object):
                                      drsuapi.DRSUAPI_DRS_NONGC_RO_REP)
                     if t_repsFrom.replica_flags != replica_flags:
                         t_repsFrom.replica_flags = replica_flags
-                c_rep.commit_repsFrom(self.samdb)
+                c_rep.commit_repsFrom(self.samdb, ro=self.readonly)
             else:
                 if dnstr not in needed_rep_table:
                     delete_reps.add(dnstr)