From 81aa4efa7b7d1d22206572fcc377375579659dd1 Mon Sep 17 00:00:00 2001 From: Joseph Sutton Date: Mon, 2 May 2022 10:50:33 +1200 Subject: s4:kdc: Make RBCD access check less strict Windows only requires SEC_ADS_CONTROL_ACCESS for the check to pass. Signed-off-by: Joseph Sutton Reviewed-by: Andrew Bartlett Reviewed-by: Andreas Schneider Autobuild-User(master): Andreas Schneider Autobuild-Date(master): Tue Jun 14 15:38:23 UTC 2022 on sn-devel-184 --- python/samba/tests/krb5/kdc_base_test.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'python') diff --git a/python/samba/tests/krb5/kdc_base_test.py b/python/samba/tests/krb5/kdc_base_test.py index 22db004f879..d9efde8273a 100644 --- a/python/samba/tests/krb5/kdc_base_test.py +++ b/python/samba/tests/krb5/kdc_base_test.py @@ -363,7 +363,7 @@ class KDCBaseTest(RawKerberosTest): owner_sid = security.dom_sid(security.SID_BUILTIN_ADMINISTRATORS) ace = security.ace() - ace.access_mask = security.SEC_ADS_GENERIC_ALL + ace.access_mask = security.SEC_ADS_CONTROL_ACCESS ace.trustee = security.dom_sid(sid) -- cgit v1.2.3