diff options
| author | Andrew Tridgell <tridge@samba.org> | 2010-08-18 18:38:26 +1000 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2010-08-20 20:34:11 +1000 |
| commit | 4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd (patch) | |
| tree | dea77563408464b03ada123475e413427464848c /Manifest | |
| parent | 6eb34e69078630f1795a75d186eccf50e1f3c683 (diff) | |
| download | samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.tar.gz samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.tar.bz2 samba-4cc6b5a69b1f94d96a73ac15d58ff71d2e4febfd.zip | |
s4-drs: bring us much closer to the docs for DRS secret replication
The rules for when a RODC can replicate secrets are:
- it can always replicate its own acct
- it can also replicate its krbtgt acct
- it can't replicate other krbtgt accts
- it can't replicate interdomain trust accounts
- it can't replicate users in the denied group list
- it can replicate users in the allowed group list
otherwise it can't replicate
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'Manifest')
0 files changed, 0 insertions, 0 deletions