auth: consistent handling of well-known alias as primary gid
authorUri Simchoni <uri@samba.org>
Tue, 17 Nov 2015 21:05:10 +0000 (23:05 +0200)
committerKarolin Seeger <kseeger@samba.org>
Mon, 23 Nov 2015 11:43:20 +0000 (12:43 +0100)
commit225b8d6d7c7b3ad678975b29d564ea101b6423f2
treefdb67854b49b2968cae9a3072d88334e46786000
parent3e76e69aaa39e1e5ee0f1aa21c66f07baed012f6
auth: consistent handling of well-known alias as primary gid

When a local user has its primary group id mapped to a well-known
alias or a builtin group, smbd accepts logins of such a user, but
fails tree-connects to shares with a "force user" set to this user
with an error of NT_STATUS_INVALID_SID.

This fix causes the connect to succeed and the NT token to resemble
the token that would have been created in a login.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11608

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit d8717a038ef82caf05fff611c7cf92aecc436563)
source3/auth/server_info.c