diff options
author | Andrew Tridgell <tridge@samba.org> | 2010-08-18 18:38:26 +1000 |
---|---|---|
committer | Andrew Tridgell <tridge@samba.org> | 2010-08-20 20:34:11 +1000 |
commit | 4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd (patch) | |
tree | dea77563408464b03ada123475e413427464848c /COPYING | |
parent | 6eb34e69078630f1795a75d186eccf50e1f3c683 (diff) | |
download | samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.tar.gz samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.tar.bz2 samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.zip |
s4-drs: bring us much closer to the docs for DRS secret replication
The rules for when a RODC can replicate secrets are:
- it can always replicate its own acct
- it can also replicate its krbtgt acct
- it can't replicate other krbtgt accts
- it can't replicate interdomain trust accounts
- it can't replicate users in the denied group list
- it can replicate users in the allowed group list
otherwise it can't replicate
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'COPYING')
0 files changed, 0 insertions, 0 deletions