Some systems don't support SEC_RIGHTS_MAXIMUM_ALLOWED for lsa_open_policy()

but NT sends 0x2000000 so we might as well do it too.
(This used to be commit 394e17645b777be767cd1c69be3f5efe7a703d85)

diff --git a/source3/utils/smbcacls.c b/source3/utils/smbcacls.c
index 7600989655e931a76f2d286e6a99f88b46e76802..a4b14df0c9f22f9d8c8ff6b3cdeb30c2e869d81d 100644 (file)
--- a/source3/utils/smbcacls.c
+++ b/source3/utils/smbcacls.c
@@ -84,8 +84,12 @@ static BOOL open_policy_hnd(void)
        /* Open policy handle */
 
        if (!got_policy_hnd) {
+
+               /* Some systems don't support SEC_RIGHTS_MAXIMUM_ALLOWED,
+                  but NT sends 0x2000000 so we might as well do it too. */
+
                if (cli_lsa_open_policy(&lsa_cli, True, 
-                                       SEC_RIGHTS_MAXIMUM_ALLOWED, &pol)
+                                       GENERIC_EXECUTE_ACCESS, &pol)
                    != NT_STATUS_NOPROBLEMO) {
                        return False;
                }