r13150: Correct comment.

Andrew Bartlett
(This used to be commit c34666abc170687daa8dcd085020880b598caaf7)

diff --git a/source4/dsdb/samdb/ldb_modules/samldb.c b/source4/dsdb/samdb/ldb_modules/samldb.c
index e92def7ccd41437a0e0e1dca6c521c61ebb4c8f0..07f617f4b5cb531a1f7c193676b78a5a617b0ebe 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/samldb.c
+++ b/source4/dsdb/samdb/ldb_modules/samldb.c
@@ -719,7 +719,7 @@ static int samldb_fill_foreignSecurityPrincipal_object(struct ldb_module *module
        if (ret >= 1) {
                const char *name = samdb_result_string(dom_msgs[0], "name", NULL);
                ldb_set_errstring(module, talloc_asprintf(mem_ctx, "Attempt to add foreign SID record with SID %s rejected, because this domian (%s) is already in the database", dom_sid_string(mem_ctx, sid), name)); 
-               /* We have a duplicate SID, we must reject the add */
+               /* We don't really like the idea of foreign sids that are not foreign */
                return LDB_ERR_CONSTRAINT_VIOLATION;
        } else if (ret == -1) {
                ldb_debug(module->ldb, LDB_DEBUG_FATAL, "samldb_fill_foreignSecurityPrincipal_object: error searching for a domain with this sid: %s\n", dom_sid_string(mem_ctx, dom_sid));