From f3e5c3cf4087491c586f41fcd138f1145e4a0098 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 23 Jan 2013 15:24:11 +0100 Subject: [PATCH] samba_upgradeprovision: fix resetting of 'nTSecurityDescriptor' on schema objects Without this schema_data_modify() will reject updates to schema objects by default. Signed-off-by: Stefan Metzmacher Reviewed-by: Andrew Bartlett --- source4/scripting/bin/samba_upgradeprovision | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/scripting/bin/samba_upgradeprovision b/source4/scripting/bin/samba_upgradeprovision index 9daabe318fac..9898333bfe51 100755 --- a/source4/scripting/bin/samba_upgradeprovision +++ b/source4/scripting/bin/samba_upgradeprovision @@ -1360,7 +1360,7 @@ def rebuild_sd(samdb, names): descr = get_empty_descriptor(names.domainsid) delta["nTSecurityDescriptor"] = MessageElement(descr, FLAG_MOD_REPLACE, "nTSecurityDescriptor") - samdb.modify(delta, ["sd_flags:1:%d" % sd_flags,"relax:0"]) + samdb.modify(delta, ["sd_flags:1:%d" % sd_flags,"relax:0","local_oid:%s:0" % dsdb.DSDB_CONTROL_DBCHECK]) except LdbError, e: samdb.transaction_cancel() res = samdb.search(expression="objectClass=*", base=str(delta.dn), -- 2.34.1