From 96f4f9652fd5795c758435765cbbb654a586c738 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Sat, 3 Sep 2016 21:58:47 +1200 Subject: [PATCH] dsdb/repl: Permit replication of Windows 2012 R2 schema by ignoring more attributes We do not need to know about the attributes that are permitted in a class, nor the permitted parent or subClass values to convert the objects from DRS, as we never enforce schema restrictions on DRS replicated objects Signed-off-by: Andrew Bartlett --- source4/dsdb/repl/replicated_objects.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/source4/dsdb/repl/replicated_objects.c b/source4/dsdb/repl/replicated_objects.c index 46b0b66..5416db4 100644 --- a/source4/dsdb/repl/replicated_objects.c +++ b/source4/dsdb/repl/replicated_objects.c @@ -121,9 +121,14 @@ WERROR dsdb_repl_resolve_working_schema(struct ldb_context *ldb, DATA_BLOB empty_key = data_blob_null; int ret, pass_no; uint32_t ignore_attids[] = { + DRSUAPI_ATTID_subClassOf, + DRSUAPI_ATTID_systemPossSuperiors, DRSUAPI_ATTID_auxiliaryClass, + DRSUAPI_ATTID_systemAuxiliaryClass, DRSUAPI_ATTID_mayContain, + DRSUAPI_ATTID_systemMayContain, DRSUAPI_ATTID_mustContain, + DRSUAPI_ATTID_systemMustContain, DRSUAPI_ATTID_possSuperiors, DRSUAPI_ATTID_systemPossSuperiors, DRSUAPI_ATTID_INVALID -- 2.7.4