s3-auth_util: make sure the system server info actually contains S-1-5-18.

Without this, all security descriptor checks for the winreg spoolss backend fail
and make our spoolss system in its current shape basically unusable.

Andreas, please check.

Guenther

diff --git a/source3/auth/auth_util.c b/source3/auth/auth_util.c
index 94adc3c7fc242a68e93457bbe4122ea3e446e5fa..9fbc7f1ba36f6c93f6d1a7c542e5583a75b64f9a 100644 (file)
--- a/source3/auth/auth_util.c
+++ b/source3/auth/auth_util.c
@@ -768,6 +768,15 @@ static NTSTATUS make_new_server_info_system(TALLOC_CTX *mem_ctx,
 
        (*server_info)->system = true;
 
+       status = add_sid_to_array_unique((*server_info)->ptok->sids,
+                                        &global_sid_System,
+                                        &(*server_info)->ptok->sids,
+                                        &(*server_info)->ptok->num_sids);
+       if (!NT_STATUS_IS_OK(status)) {
+               TALLOC_FREE((*server_info));
+               return status;
+       }
+
        return NT_STATUS_OK;
 }