r4871: BUG 603: patch by Daniel Beschorner <db@unit-netz.de>. Correct access mask...

(This used to be commit 2e7a5608ac6a11f4e9e8bda69abb984fb4f86eb8)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index 5fd5137cf1a413278b131e96901a0b9b5518f7eb..462a646329334a78be4369de91ff1dd2c6c4bb84 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -2541,8 +2541,11 @@ NTSTATUS _samr_lookup_domain(pipes_struct *p, SAMR_Q_LOOKUP_DOMAIN *q_u, SAMR_R_
        if (!find_policy_by_hnd(p, &q_u->connect_pol, (void**)&info))
                return NT_STATUS_INVALID_HANDLE;
 
+       /* win9x user manager likes to use SA_RIGHT_SAM_ENUM_DOMAINS here.  
+          Reverted that change so we will work with RAS servers again */
+
        if (!NT_STATUS_IS_OK(r_u->status = access_check_samr_function(info->acc_granted, 
-               SA_RIGHT_SAM_ENUM_DOMAINS, "_samr_lookup_domain"))) 
+               SA_RIGHT_SAM_OPEN_DOMAIN, "_samr_lookup_domain"))) 
        {
                return r_u->status;
        }