r2566: Fix creation of aliases via usrmgr. Winbind was too strict checking the type

of sids.

Volker

diff --git a/source/nsswitch/winbindd_sid.c b/source/nsswitch/winbindd_sid.c
index c6e503bef39d6651a142a1895ec65e1b8a9e0947..97e676813dde211e1c14521834e49391d269025c 100644 (file)
--- a/source/nsswitch/winbindd_sid.c
+++ b/source/nsswitch/winbindd_sid.c
@@ -316,8 +316,16 @@ enum winbindd_result winbindd_sid_to_gid(struct winbindd_cli_state *state)
                fstring dom_name, name;
                enum SID_NAME_USE type;
 
-               if (!winbindd_lookup_name_by_sid(&sid, dom_name, name, &type))
-                       return WINBINDD_ERROR;
+               if (sid_check_is_in_our_domain(&sid)) {
+                       /* This is for half-created aliases... */
+                       type = SID_NAME_ALIAS;
+               } else {
+                       /* Foreign domains need to be looked up by the DC if
+                        * it's the right type */
+                       if (!winbindd_lookup_name_by_sid(&sid, dom_name, name,
+                                                        &type))
+                               return WINBINDD_ERROR;
+               }
 
                if ((type != SID_NAME_DOM_GRP) && (type != SID_NAME_ALIAS) &&
                    (type != SID_NAME_WKN_GRP))