s4-drs: removed the warning on WRIT_REP being set
authorAndrew Tridgell <tridge@samba.org>
Mon, 23 Aug 2010 01:32:28 +0000 (11:32 +1000)
committerAndrew Tridgell <tridge@samba.org>
Mon, 23 Aug 2010 05:55:39 +0000 (15:55 +1000)
we just need to clear this flag

source4/rpc_server/drsuapi/getncchanges.c

index 7a1ccd90a4c38875a470a1335ea5b57e386e7d0e..85522d0b050a99a5e1245f8f3a91c0c78ac68f15 100644 (file)
@@ -1027,10 +1027,8 @@ WERROR dcesrv_drsuapi_DsGetNCChanges(struct dcesrv_call_state *dce_call, TALLOC_
        security_level = security_session_user_level(dce_call->conn->auth_state.session_info,
                                                     samdb_domain_sid(sam_ctx));
        if (security_level == SECURITY_RO_DOMAIN_CONTROLLER &&
-           (req8->replica_flags & DRSUAPI_DRS_WRIT_REP) &&
-           req8->extended_op != DRSUAPI_EXOP_REPL_SECRET) {
-               DEBUG(3,(__location__ ": Removing WRIT_REP flag for replication by RODC %s\n",
-                        dom_sid_string(mem_ctx, user_sid)));
+           req8->replica_flags & DRSUAPI_DRS_WRIT_REP) {
+               /* we rely on this flag being unset for RODC requests */
                req8->replica_flags &= ~DRSUAPI_DRS_WRIT_REP;
        }