summaryrefslogtreecommitdiff
path: root/python
diff options
context:
space:
mode:
authorJoseph Sutton <josephsutton@catalyst.net.nz>2022-05-02 10:50:33 +1200
committerAndreas Schneider <asn@cryptomilk.org>2022-06-14 15:38:23 +0000
commit81aa4efa7b7d1d22206572fcc377375579659dd1 (patch)
tree1df5186d43aa86543aa82f6420e137d7d6c53545 /python
parent971441ca5244b0e56f6b664d785fcefa3867ede1 (diff)
downloadsamba-81aa4efa7b7d1d22206572fcc377375579659dd1.tar.gz
samba-81aa4efa7b7d1d22206572fcc377375579659dd1.tar.bz2
samba-81aa4efa7b7d1d22206572fcc377375579659dd1.zip
s4:kdc: Make RBCD access check less strict
Windows only requires SEC_ADS_CONTROL_ACCESS for the check to pass. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Jun 14 15:38:23 UTC 2022 on sn-devel-184
Diffstat (limited to 'python')
-rw-r--r--python/samba/tests/krb5/kdc_base_test.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py
index 22db004f879..d9efde8273a 100644
--- a/python/samba/tests/krb5/kdc_base_test.py
+++ b/python/samba/tests/krb5/kdc_base_test.py
@@ -363,7 +363,7 @@ class KDCBaseTest(RawKerberosTest):
owner_sid = security.dom_sid(security.SID_BUILTIN_ADMINISTRATORS)
ace = security.ace()
- ace.access_mask = security.SEC_ADS_GENERIC_ALL
+ ace.access_mask = security.SEC_ADS_CONTROL_ACCESS
ace.trustee = security.dom_sid(sid)