s4-drs: allow bypass of writespn checking for some SPNs
authorAndrew Tridgell <tridge@samba.org>
Mon, 8 Nov 2010 08:01:36 +0000 (19:01 +1100)
committerAndrew Tridgell <tridge@samba.org>
Mon, 8 Nov 2010 08:45:16 +0000 (08:45 +0000)
commitb38a9a8999949733e98be52fafd1b3a7a2317116
tree212d8f7ce50808ec68b893eda5d0096f2eae08e6
parentcb3d6c407e9ab3e5e8dffeae5e2e77769056d75a
s4-drs: allow bypass of writespn checking for some SPNs

this allows accounts (and in particular RODCs) to make SPN updates on
their own account if they take the form SERVICE/hostname

we may be able to remove this in the future after some changes in our
ACL checking for userPrincipalName

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Nov  8 08:45:16 UTC 2010 on sn-devel-104
source4/rpc_server/drsuapi/writespn.c