libds:flag_mapping.c - support also the default read-only DC primary group

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libds/common/flag_mapping.c b/libds/common/flag_mapping.c
index dfe619971f8382d4449fca5e933c495c0991224b..cf63327776c890513250d42795eae8c8ea4351b5 100644 (file)
--- a/libds/common/flag_mapping.c
+++ b/libds/common/flag_mapping.c
@@ -153,7 +153,9 @@ uint32_t ds_uf2prim_group_rid(uint32_t uf)
 {
        uint32_t prim_group_rid = DOMAIN_RID_USERS;
 
-       if (uf & UF_SERVER_TRUST_ACCOUNT)           prim_group_rid = DOMAIN_RID_DCS;
+       if ((uf & UF_PARTIAL_SECRETS_ACCOUNT)
+        && (uf & UF_WORKSTATION_TRUST_ACCOUNT))    prim_group_rid = DOMAIN_RID_READONLY_DCS;
+       else if (uf & UF_SERVER_TRUST_ACCOUNT)      prim_group_rid = DOMAIN_RID_DCS;
        else if (uf & UF_WORKSTATION_TRUST_ACCOUNT) prim_group_rid = DOMAIN_RID_DOMAIN_MEMBERS;
 
        return prim_group_rid;