auth: consistent handling of well-known alias as primary gid
authorUri Simchoni <uri@samba.org>
Tue, 17 Nov 2015 21:05:10 +0000 (23:05 +0200)
committerJeremy Allison <jra@samba.org>
Thu, 19 Nov 2015 19:17:23 +0000 (20:17 +0100)
commitd8717a038ef82caf05fff611c7cf92aecc436563
tree1a991ce3313ece9c56423772f27ca7a4d21a5ca4
parent42b7d48f76189b1e138f5cac6489a4d018598c87
auth: consistent handling of well-known alias as primary gid

When a local user has its primary group id mapped to a well-known
alias or a builtin group, smbd accepts logins of such a user, but
fails tree-connects to shares with a "force user" set to this user
with an error of NT_STATUS_INVALID_SID.

This fix causes the connect to succeed and the NT token to resemble
the token that would have been created in a login.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11608

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
source3/auth/server_info.c