s3:secrets: allow secrets_fetch_or_upgrade_domain_info() on an AD DC
authorStefan Metzmacher <metze@samba.org>
Thu, 17 Aug 2017 19:42:34 +0000 (21:42 +0200)
committerAndrew Bartlett <abartlet@samba.org>
Fri, 18 Aug 2017 04:07:12 +0000 (06:07 +0200)
commit37e49a2af5bb1c40c17eab18ff9412f2ce79ef71
tree2bbde4a9ed584ac72dff36fc27385d6d9a040455
parent0bb4d28272914736a46dc5cdb0bef766ba7a4ab8
s3:secrets: allow secrets_fetch_or_upgrade_domain_info() on an AD DC

The reason for the check is for write access as secrets.ldb is the
master database.

But secrets_fetch_or_upgrade_domain_info() just syncs the values
we got from if they got overwritten by secrets_store_machine_pw_sync().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12973

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/passdb/machine_account_secrets.c