Fix SAMR server for winbindd access. Ensure we allow

MAX_ACCESS to be mapped to what we're giving Everyone.
Jeremy.

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index dabdc964c5a091c069f574da202aeedadb82069a..09b97b2b39dc5516e6520fbfc21b5478877dcbe3 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -243,8 +243,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
        }
        *pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
 
-       /* At least try for generic read. */
-       *pacc_requested = GENERIC_READ_ACCESS;
+       /* At least try for generic read|execute - Everyone gets that. */
+       *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
 
        /* root gets anything. */
        if (geteuid() == sec_initial_uid()) {