diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-11-16 09:30:55 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-11-15 23:17:05 +0000 |
| commit | a32ade647db710ed84565891fca3e65dd609f69d (patch) | |
| tree | 2e4a7bb6ec562d7a9b6ec547256c1cc6e11da63e /docs-xml/archives | |
| parent | 4041640bd6d7f8747c8229b02dbb847056bdaa35 (diff) | |
| download | samba-a32ade647db710ed84565891fca3e65dd609f69d.tar.gz samba-a32ade647db710ed84565891fca3e65dd609f69d.tar.bz2 samba-a32ade647db710ed84565891fca3e65dd609f69d.zip | |
s4-kdc Don't always regenerate the PAC
The PAC was being regenerated on all normal DCs, because they don't
have a msDS-SecondaryKrbTgtNumber attribute. Instead we need to check
if it's set and not equal to our RODC number, allowing RODCs to trust
the full DCs and itself, but not other RODCs.
Andrew Bartlett
Diffstat (limited to 'docs-xml/archives')
0 files changed, 0 insertions, 0 deletions