r5927: Fix ldapsam trusted enum_group_members. We were searching in the user

suffix instead of the group suffix.

Thanks to John Janosik (jpjanosi@us.ibm.com).

diff --git a/source/passdb/pdb_ldap.c b/source/passdb/pdb_ldap.c
index f086b3f09b22d3ffabb50790b4d4c36079f65b06..3dab919cb4698fa2333e5ec7d4a3748ce49a584b 100644 (file)
--- a/source/passdb/pdb_ldap.c
+++ b/source/passdb/pdb_ldap.c
@@ -2288,7 +2288,7 @@ static NTSTATUS ldapsam_enum_group_members(struct pdb_methods *methods,
 
        {
                const char *attrs[] = { "memberUid", NULL };
-               rc = smbldap_search(conn, lp_ldap_user_suffix(),
+               rc = smbldap_search(conn, lp_ldap_group_suffix(),
                                    LDAP_SCOPE_SUBTREE, filter, attrs, 0,
                                    &msg);
        }