r18416: We need to look for both builtinDomain and domain, in the OpenDomain call.

Andrew Bartlett

diff --git a/source/rpc_server/samr/dcesrv_samr.c b/source/rpc_server/samr/dcesrv_samr.c
index 032e37c1dd4351f66f5fa9c9237b4002e8ac7bff..971541bf9d47dfa522dc18d1ac6fe80b469cf5c9 100644 (file)
--- a/source/rpc_server/samr/dcesrv_samr.c
+++ b/source/rpc_server/samr/dcesrv_samr.c
@@ -387,7 +387,7 @@ static NTSTATUS samr_OpenDomain(struct dcesrv_call_state *dce_call, TALLOC_CTX *
 
        ret = gendb_search(c_state->sam_ctx,
                           mem_ctx, NULL, &dom_msgs, dom_attrs,
-                          "(&(objectSid=%s)(&(objectclass=domain)))",
+                          "(&(objectSid=%s)(&(|(objectclass=domain)(objectClass=builtinDomain))))",
                           ldap_encode_ndr_dom_sid(mem_ctx, r->in.sid));
        if (ret == 0) {
                return NT_STATUS_NO_SUCH_DOMAIN;