Fix Domain Trust creation with Windows 2008 (and many other tools)
authorAndrew Bartlett <abartlet@samba.org>
Fri, 3 Oct 2008 23:25:59 +0000 (16:25 -0700)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 6 Oct 2008 21:16:29 +0000 (14:16 -0700)
commitc412a930ad19da866503e6d8ccb71fb3191fc6d2
treed29644a6e41328f8b2d25103803be4951fa519e0
parent2a35985283be45adbba63b5d7ced8499bcb64f59
Fix Domain Trust creation with Windows 2008 (and many other tools)

A dITConentRules attribute (unlike objectClasses) must not contain a
'SUP'.

The ADSI layer in Windows would download the whole schema, and
validate it.  Thanks to the team at Microsoft for very long debugging
session to find this.

Andrew Bartlett
source4/dsdb/schema/schema_description.c