s4:dsdb/descriptor: inherit nTSecurityDescriptor changes to children (bug #8621)

Signed-off-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c
index 74ddbaafb30e270de9ee98bdf5ab683d41b95cf7..88a840c82772ca3e90e955798b1fd1130cf6006e 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/descriptor.c
+++ b/source4/dsdb/samdb/ldb_modules/descriptor.c
@@ -795,6 +795,10 @@ static int descriptor_modify(struct ldb_module *module, struct ldb_request *req)
                        return ldb_oom(ldb);
                }
        } else {
+               ret = dsdb_module_schedule_sd_propagation(module, dn, false);
+               if (ret != LDB_SUCCESS) {
+                       return ldb_operr(ldb);
+               }
                sd_element->values[0] = *sd;
        }