s4-dsdb: allow uninstantiated NC heads

[ira/wip.git] / source4 / dsdb / samdb / ldb_modules / instancetype.c

diff --git a/source4/dsdb/samdb/ldb_modules/instancetype.c b/source4/dsdb/samdb/ldb_modules/instancetype.c
index e008deb02b39d08df2ab395d7ca7d2fc8ffe9163..d743d4fb30ec72d4b716a21f145c167fc889a697 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/instancetype.c
+++ b/source4/dsdb/samdb/ldb_modules/instancetype.c
@@ -77,9 +77,11 @@ static int instancetype_add(struct ldb_module *module, struct ldb_request *req)
                } else {
                        /*
                         * If we have a NC add operation then we need also the
-                        * "TYPE_WRITE" flag in order to succeed.
+                        * "TYPE_WRITE" flag in order to succeed,
+                        * unless this NC is not instantiated
                        */
-                       if (!(instanceType & INSTANCE_TYPE_WRITE)) {
+                       if (!(instanceType & INSTANCE_TYPE_UNINSTANT) &&
+                           !(instanceType & INSTANCE_TYPE_WRITE)) {
                                ldb_set_errstring(ldb, "instancetype: if TYPE_IS_NC_HEAD was set, then also TYPE_WRITE is requested!");
                                return LDB_ERR_UNWILLING_TO_PERFORM;
                        }