s4:dsdb/tests/sec_descriptor: verify the search of a windows dc join keeps working

This is a regression test for bug #9470.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Mon Dec 10 15:41:12 CET 2012 on sn-devel-104

diff --git a/source4/dsdb/tests/python/sec_descriptor.py b/source4/dsdb/tests/python/sec_descriptor.py
index cf213ab0436e5601262c950cb12d3ccb9a4f7d29..78cd052a939c6438c22b97bb7713b8e7e8a50159 100755 (executable)
--- a/source4/dsdb/tests/python/sec_descriptor.py
+++ b/source4/dsdb/tests/python/sec_descriptor.py
@@ -1965,6 +1965,13 @@ class SdFlagsDescriptorTests(DescriptorTests):
         self.assertTrue("D:" in sddl)
         self.assertTrue("S:" in sddl)
 
+    def test_312(self):
+        """This search is done by the windows dc join..."""
+
+        res = self.ldb_admin.search(self.base_dn, SCOPE_BASE, None, ["1.1"],
+                controls=["extended_dn:1:0", "sd_flags:1:0", "search_options:1:1"])
+        self.assertFalse("nTSecurityDescriptor" in res[0])
+
 class RightsAttributesTests(DescriptorTests):
 
     def deleteAll(self):