summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2010-11-08 12:13:32 +1100
committerAndrew Tridgell <tridge@samba.org>2010-11-08 18:15:23 +1100
commit3c4376c4d8dbd7c5db52df7442ec410dbfb06e62 (patch)
tree42f06f3911b8dcf91241deba58d9bcd235a39ff7
parente77e162b973632b9717b48548b3b88e2ef2fd896 (diff)
downloadsamba-3c4376c4d8dbd7c5db52df7442ec410dbfb06e62.tar.gz
samba-3c4376c4d8dbd7c5db52df7442ec410dbfb06e62.tar.bz2
samba-3c4376c4d8dbd7c5db52df7442ec410dbfb06e62.zip
s4-dsdb Explain why we may not use the GC name in some situations.
This delicate balance caused us a bit of a puzzle when we could not work out why an DC join failed with the new python scripts. Andrew Bartlett
-rw-r--r--source4/dsdb/repl/drepl_partitions.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/source4/dsdb/repl/drepl_partitions.c b/source4/dsdb/repl/drepl_partitions.c
index 70173fea01..d4511f62bc 100644
--- a/source4/dsdb/repl/drepl_partitions.c
+++ b/source4/dsdb/repl/drepl_partitions.c
@@ -141,6 +141,14 @@ NTSTATUS dreplsrv_get_target_principal(struct dreplsrv_service *s,
return NT_STATUS_OK;
}
+ /* All DCs have the GC/hostname/realm name, but if some of the
+ * preconditions are not satisfied, then we will fall back to
+ * the
+ * E3514235-4B06-11D1-AB04-00C04FC2DCD2/${NTDSGUID}/${DNSDOMAIN}
+ * name. This means that if a AD server has a dnsHostName set
+ * on it's record, it must also have GC/hostname/realm
+ * servicePrincipalName */
+
*target_principal = talloc_asprintf(mem_ctx, "GC/%s/%s",
hostname,
lpcfg_dnsdomain(s->task->lp_ctx));