recalc sd trusted...

diff --git a/source4/dsdb/samdb/ldb_modules/descriptor.c b/source4/dsdb/samdb/ldb_modules/descriptor.c
index f27bc505edb96640d885caa60c95b44d579a7759..46f83904f283a87ec5598132a069da4405a342ca 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/descriptor.c
+++ b/source4/dsdb/samdb/ldb_modules/descriptor.c
@@ -821,6 +821,8 @@ static int descriptor_modify_callback(struct ldb_request *mod_req,
                                               LDB_ERR_OPERATIONS_ERROR);
                }
 
+               ldb_req_mark_trusted(sub_req);
+
                ret = ldb_request_add_control(sub_req,
                                              LDB_CONTROL_RECALCULATE_SD_OID,
                                              true, NULL);
@@ -1018,6 +1020,8 @@ static int descriptor_rename_callback(struct ldb_request *rename_req,
                                       LDB_ERR_OPERATIONS_ERROR);
        }
 
+       ldb_req_mark_trusted(mod_req);
+
        ret = ldb_request_add_control(mod_req,
                                      LDB_CONTROL_RECALCULATE_SD_OID,
                                      true, NULL);