From 60be4a4c3729f0a1353947abc4a688c06a94e54d Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Thu, 13 Jan 2011 17:40:29 +1100 Subject: s4-kdc: don't ask for an extended DN for krbtgt_dn otherwise msg->dn would be non-minimal and would fail in searches Pair-Programmed-With: Andrew Bartlett --- source4/kdc/db-glue.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index cdfec7b0b9..ed64685a4f 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -1730,7 +1730,7 @@ NTSTATUS samba_kdc_setup_db_ctx(TALLOC_CTX *mem_ctx, struct samba_kdc_base_conte ldb_ret = dsdb_search_one(kdc_db_ctx->samdb, kdc_db_ctx, &msg, NULL, LDB_SCOPE_SUBTREE, krbtgt_attrs, - DSDB_SEARCH_SHOW_EXTENDED_DN, + 0, "(&(objectClass=user)(samAccountName=krbtgt))"); if (ldb_ret != LDB_SUCCESS) { -- cgit