Bug 6718 - Feature request: LDB should enforce "systemFlags" constraints
Summary: Feature request: LDB should enforce "systemFlags" constraints
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.0
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: unspecified
Hardware: All All
: P3 enhancement (vote)
Target Milestone: ---
Assignee: Andrew Bartlett
QA Contact: samba4-qa@samba.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-09-13 11:03 UTC by Matthias Dieter Wallnöfer
Modified: 2010-08-01 03:19 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Dieter Wallnöfer 2009-09-13 11:03:00 UTC 
We need to write a LDB module which enforces the rules specified in the "systemFlags" and "isCriticalSystemObject" attributes of the objects (deny deletions, moves...).
Comment 1 Matthias Dieter Wallnöfer 2010-05-24 05:01:09 UTC 
"isCriticalSystemObject" is only a replication process setting (http://msdn.microsoft.com/en-us/library/cc220034(PROT.10).aspx).
Comment 2 Matthias Dieter Wallnöfer 2010-08-01 03:19:37 UTC 
Most of the "systemFlags" constraints should now be enforced after my work has been checked in. I've enhanced also ldap.py in order to test them.