From 5b3981acb1e0e0ef6832c1147b1ec5b3659c1aa9 Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Thu, 18 Nov 2010 18:48:42 +1100 Subject: s4-rodc: enable the DRS_GET_ALL_GROUP_MEMBERSHIP flag for RODC replication see the description of this flag in [MS-DRSR] --- source4/dsdb/kcc/kcc_periodic.c | 1 + source4/scripting/python/samba/join.py | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) (limited to 'source4') diff --git a/source4/dsdb/kcc/kcc_periodic.c b/source4/dsdb/kcc/kcc_periodic.c index fa2b0679df..e0ac2c7786 100644 --- a/source4/dsdb/kcc/kcc_periodic.c +++ b/source4/dsdb/kcc/kcc_periodic.c @@ -171,6 +171,7 @@ static uint32_t kccsrv_replica_flags(struct kccsrv_service *s) DRSUAPI_DRS_PER_SYNC | DRSUAPI_DRS_ADD_REF | DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING | + DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIP | DRSUAPI_DRS_NONGC_RO_REP; } return DRSUAPI_DRS_INIT_SYNC | diff --git a/source4/scripting/python/samba/join.py b/source4/scripting/python/samba/join.py index 8db00bc47d..deeedc5ad3 100644 --- a/source4/scripting/python/samba/join.py +++ b/source4/scripting/python/samba/join.py @@ -545,7 +545,8 @@ def join_RODC(server=None, creds=None, lp=None, site=None, netbios_name=None, drsuapi.DRSUAPI_DRS_PER_SYNC | drsuapi.DRSUAPI_DRS_GET_ANC | drsuapi.DRSUAPI_DRS_NEVER_SYNCED | - drsuapi.DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING) + drsuapi.DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING | + drsuapi.DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIP) ctx.do_join() -- cgit