r15307: Ignore builtin groups we're a member of on the DC as those memberships

are not valid locally.

Guenther
(This used to be commit 177da7754b53348d8754d46098dbd11300234bb5)

diff --git a/source3/nsswitch/winbindd_ads.c b/source3/nsswitch/winbindd_ads.c
index ede176527365eded0f3cc6cf27dd523edb8482b9..30064603d16e995ac4b749eb3ac58caf97b4c028 100644 (file)
--- a/source3/nsswitch/winbindd_ads.c
+++ b/source3/nsswitch/winbindd_ads.c
@@ -585,7 +585,12 @@ static NTSTATUS lookup_usergroups_alt(struct winbindd_domain *domain,
                                DEBUG(1,("No sid for this group ?!?\n"));
                                continue;
                        }
-
+       
+                       /* ignore Builtin groups from ADS - Guenther */
+                       if (sid_check_is_in_builtin(&group_sid)) {
+                               continue;
+                       }
+                              
                        add_sid_to_array(mem_ctx, &group_sid, user_sids,
                                         &num_groups);
                }