s4/dsdb/samldb: Disallow setting a domain-local group as a primary group
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Thu, 22 Dec 2022 02:54:14 +0000 (15:54 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Feb 2023 00:03:40 +0000 (00:03 +0000)
commitd2dc8370dd1916dffa01257b1681fad00f0d33cf
treebc73f2893d06a0edf8bfea407ad0aa485fae947d
parent4f2f31621385209efa8d715e9bee9256d6ddc71e
s4/dsdb/samldb: Disallow setting a domain-local group as a primary group

Windows also disallows this. Note that changing a primary group to a
domain-local group is allowed by both Windows and Samba.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
selftest/knownfail.d/domain-local-primary-group [deleted file]
selftest/knownfail_heimdal_kdc
selftest/knownfail_mit_kdc
source4/dsdb/samdb/ldb_modules/samldb.c