provision: Fill in validAccesses in extended-rights.ldif for Validated Writes
authorAndrew Bartlett <abartlet@samba.org>
Sun, 10 Dec 2017 23:26:04 +0000 (12:26 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 14 Dec 2017 07:20:15 +0000 (08:20 +0100)
MS-ATDS 5.1.3.2.2 Validated Writes specifies the value of RIGHT_DS_WRITE_PROPERTY_EXTENDED which is
8 (0x08) per 5.1.3.2 Access Rights.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
source4/setup/extended-rights.ldif

index 4daa21ac5ca5a14f5939aab3e75a25ca0ffc0e33..9e94b58164ad2c957ea961118448a218f2083443 100644 (file)
@@ -326,6 +326,7 @@ objectClass: controlAccessRight
 displayName: Self-Membership
 rightsGuid: bf9679c0-0de6-11d0-a285-00aa003049e2
 appliesTo: bf967a9c-0de6-11d0-a285-00aa003049e2
+validAccesses: 8
 
 dn: CN=Validated-DNS-Host-Name,CN=Extended-Rights,${CONFIGDN}
 objectClass: top
@@ -335,6 +336,7 @@ rightsGuid: 72e39547-7b18-11d1-adef-00c04fd8d5cd
 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 appliesTo: ce206244-5827-4a86-ba1c-1c0c386c1b64
 ${INC2012}appliesTo: 7b8b558a-93a5-4af7-adca-c017e67f1057
+validAccesses: 8
 
 dn: CN=Validated-SPN,CN=Extended-Rights,${CONFIGDN}
 objectClass: top
@@ -343,6 +345,7 @@ displayName: Validated-SPN
 rightsGuid: f3a64788-5306-11d1-a9c5-0000f80367c1
 appliesTo: bf967a86-0de6-11d0-a285-00aa003049e2
 appliesTo: ce206244-5827-4a86-ba1c-1c0c386c1b64
+validAccesses: 8
 
 dn: CN=Generate-RSoP-Planning,CN=Extended-Rights,${CONFIGDN}
 objectClass: top