s3:ldap: don't search when no values where found

diff --git a/source3/passdb/pdb_ldap.c b/source3/passdb/pdb_ldap.c
index 54cb03de8533795cfe2de05b98bd371d3ebed5e2..87df75e7fd7499d2800a5afbe3ea2ac55ca739c3 100644 (file)
--- a/source3/passdb/pdb_ldap.c
+++ b/source3/passdb/pdb_ldap.c
@@ -2683,7 +2683,7 @@ static NTSTATUS ldapsam_enum_group_members(struct pdb_methods *methods,
 
        values = ldap_get_values(conn->ldap_struct, entry, "memberUid");
 
-       if (values) {
+       if ((values != NULL) && (values[0] != NULL)) {
 
                filter = talloc_asprintf(mem_ctx, "(&(objectClass=%s)(|", LDAP_OBJ_SAMBASAMACCOUNT);
                if (filter == NULL) {