diff options
| author | Jim McDonough <jmcd@samba.org> | 2009-06-29 10:06:14 -0400 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2009-06-30 09:09:35 +0200 |
| commit | 880d1a3f83a0834225d5a7c0f179c236b0e59ef8 (patch) | |
| tree | b1e6cd7abfb88effdff4d8333d4e93dc688dca5e /source/librpc/gen_ndr/libnet_join.h | |
| parent | db7c5d175ba2d733df445f7d0dc570a79a417f49 (diff) | |
| download | samba-880d1a3f83a0834225d5a7c0f179c236b0e59ef8.tar.gz samba-880d1a3f83a0834225d5a7c0f179c236b0e59ef8.tar.xz samba-880d1a3f83a0834225d5a7c0f179c236b0e59ef8.zip | |
Don't require "Modify property" perms to unjoin (bug #6481) "net ads leave" stopped working when "modify properties" permissions were not granted (meaning you had to be allowed to disable the account that you were about to delete).
Libnetapi should not delete machine accounts, as this does not
happen on win32. The WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE flag
really means "disable" (both in practice and docs).
However, to keep the functionality in "net ads leave", we
will still try to do the delete. If this fails, we try
to do the disable.
Additionally, it is possible in windows to not disable or
delete the account, but just tell the local machine that it
is no longer in the account. libnet can now do this as well.
Don't use ads realm name for non-ads case. #6481
Also check that the connection to ads worked.
Diffstat (limited to 'source/librpc/gen_ndr/libnet_join.h')
| -rw-r--r-- | source/librpc/gen_ndr/libnet_join.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/source/librpc/gen_ndr/libnet_join.h b/source/librpc/gen_ndr/libnet_join.h index e5ec438bb58..0de71323248 100644 --- a/source/librpc/gen_ndr/libnet_join.h +++ b/source/librpc/gen_ndr/libnet_join.h @@ -56,6 +56,7 @@ struct libnet_UnjoinCtx { const char * admin_password; const char * machine_password; uint32_t unjoin_flags; + uint8_t delete_machine_account; uint8_t modify_config; struct dom_sid *domain_sid;/* [ref] */ struct ads_struct *ads;/* [ref] */ |