objectclass_attrs: Restrict systemOnly attributes
authorGarming Sam <garming@catalyst.net.nz>
Mon, 6 Mar 2017 23:30:09 +0000 (12:30 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Mon, 13 Mar 2017 04:10:12 +0000 (05:10 +0100)
commitc4aa78ba875f3a9ca4e586823ce63826da8daa90
treec314e53a5f2aeb05082abfd378fa217c7b72677f
parent45ccd84ad86b5a48fb15acb208cf1f94e17fbd24
objectclass_attrs: Restrict systemOnly attributes

This allows restriction of auditing attributes from being wiped.
Modifications of the RID Set must be done as SYSTEM.

Signed-off-by: Garming Sam <garming@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/dsdb/samdb/ldb_modules/objectclass_attrs.c
source4/dsdb/samdb/ldb_modules/ridalloc.c
source4/dsdb/samdb/ldb_modules/wscript_build_server