s4-dns: ensure we get the right case on the grant rule for administrator

[obnox/samba/samba-obnox.git] / source4 / dsdb / dns / dns_update.c

diff --git a/source4/dsdb/dns/dns_update.c b/source4/dsdb/dns/dns_update.c
index ae5be44366fbba028c1d3b2b9effecc664aa5c77..3c625db7cc30c46d2bcd1eae28e3e52277f8aa6f 100644 (file)
--- a/source4/dsdb/dns/dns_update.c
+++ b/source4/dsdb/dns/dns_update.c
@@ -111,7 +111,7 @@ static void dnsupdate_rebuild(struct dnsupdate_service *service)
        TALLOC_FREE(service->confupdate.subreq);
 
        ret = ldb_search(service->samdb, tmp_ctx, &res, NULL, LDB_SCOPE_SUBTREE,
-                        attrs, "(&(primaryGroupID=%u)(objectClass=computer))",
+                        attrs, "(|(samaccountname=administrator)(&(primaryGroupID=%u)(objectClass=computer)))",
                         DOMAIN_RID_DCS);
        if (ret != LDB_SUCCESS) {
                DEBUG(0,(__location__ ": Unable to find DCs list - %s", ldb_errstring(service->samdb)));
@@ -154,7 +154,6 @@ static void dnsupdate_rebuild(struct dnsupdate_service *service)
                dprintf(fd, "/* End of static entries */\n");
        }
        dprintf(fd, "\tgrant %s ms-self * A AAAA;\n", realm);
-       dprintf(fd, "\tgrant administrator@%s wildcard * A AAAA SRV CNAME TXT;\n", realm);
 
        for (i=0; i<res->count; i++) {
                const char *acctname;