r21179: Anything more complex than this causes the keytab never to be updated...

Andrew Bartlett
(This used to be commit c3977b4bae1e1b5e4ff4a64c7146534536685e91)

diff --git a/source4/dsdb/samdb/ldb_modules/update_keytab.c b/source4/dsdb/samdb/ldb_modules/update_keytab.c
index 411f8c98ef2dd21877b60e59ba6214e734d2a5cc..fa61887bd5b4d320b57d9f230700fa8ac58ca8f6 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/update_keytab.c
+++ b/source4/dsdb/samdb/ldb_modules/update_keytab.c
@@ -61,7 +61,8 @@ static int add_modified(struct ldb_module *module, struct ldb_dn *dn, BOOL delet
        }
 
        cli_credentials_set_conf(item->creds);
-       filter = talloc_asprintf(item, "(&(&(objectClass=kerberosSecret)(&(privateKeytab=*)(|(secret=*)(ntPwdHash=*))))(dn=%s))", 
+/*     filter = talloc_asprintf(item, "(&(&(&(objectClass=kerberosSecret)(privateKeytab=*))(|(secret=*)(ntPwdHash=*)))(distinguishedName=%s))", */ 
+       filter = talloc_asprintf(item, "dn=%s",
                                 ldb_dn_get_linearized(dn));
        status = cli_credentials_set_secrets(item->creds, module->ldb, NULL, filter);
        talloc_free(filter);