diff options
| author | Andrew Tridgell <tridge@samba.org> | 2010-01-05 17:08:56 +1100 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2010-01-08 13:02:58 +1100 |
| commit | 5eb3b919c59b62065db32e0575fcd1d84a64e3db (patch) | |
| tree | f7544ed1596a0dea4303577ce9969945ff9b1bc9 | |
| parent | 2bad107aa1110bd003aaca91c3214fe2c6b07197 (diff) | |
| download | samba-5eb3b919c59b62065db32e0575fcd1d84a64e3db.tar.gz samba-5eb3b919c59b62065db32e0575fcd1d84a64e3db.tar.bz2 samba-5eb3b919c59b62065db32e0575fcd1d84a64e3db.zip | |
s4-provision: the DC object itself needs a fixed objectSID
We can't allocate a objectSID until we have rIDSetReferences, but that
is in the DC object, so we have to force the objectSID of the DC
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
| -rw-r--r-- | source4/scripting/python/samba/provision.py | 1 | ||||
| -rw-r--r-- | source4/setup/provision_self_join.ldif | 3 |
2 files changed, 3 insertions, 1 deletions
diff --git a/source4/scripting/python/samba/provision.py b/source4/scripting/python/samba/provision.py index d7d0a790ca..62ca9282d1 100644 --- a/source4/scripting/python/samba/provision.py +++ b/source4/scripting/python/samba/provision.py @@ -796,6 +796,7 @@ def setup_self_join(samdb, names, "DNSPASS_B64": b64encode(dnspass), "REALM": names.realm, "DOMAIN": names.domain, + "DOMAINSID": str(domainsid), "DNSDOMAIN": names.dnsdomain, "SAMBA_VERSION_STRING": version, "NTDSGUID": ntdsguid_line, diff --git a/source4/setup/provision_self_join.ldif b/source4/setup/provision_self_join.ldif index f110902316..0ad1b90fdb 100644 --- a/source4/setup/provision_self_join.ldif +++ b/source4/setup/provision_self_join.ldif @@ -33,6 +33,7 @@ servicePrincipalName: ldap/${DNSNAME} servicePrincipalName: ldap/${DNSNAME}/${REALM} userAccountControl: 532480 userPassword:: ${MACHINEPASS_B64} +objectSID: ${DOMAINSID}-1001 dn: CN=RID Set,CN=${NETBIOSNAME},OU=Domain Controllers,${DOMAINDN} objectClass: top @@ -40,7 +41,7 @@ objectClass: rIDSet rIDAllocationPool: 1000-1499 rIDPreviousAllocationPool: 1000-1499 rIDUsedPool: 0 -rIDNextRID: 1000 +rIDNextRID: 1001 # Here are missing the objects for the NTFRS subscription and the RID set since |