Fix SAMR server for winbindd access. Ensure we allow
authorJeremy Allison <jra@samba.org>
Mon, 18 May 2009 21:26:37 +0000 (14:26 -0700)
committerJeremy Allison <jra@samba.org>
Mon, 18 May 2009 21:26:37 +0000 (14:26 -0700)
MAX_ACCESS to be mapped to what we're giving Everyone.
Jeremy.

source3/rpc_server/srv_samr_nt.c

index dabdc964c5a091c069f574da202aeedadb82069a..09b97b2b39dc5516e6520fbfc21b5478877dcbe3 100644 (file)
@@ -243,8 +243,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
        }
        *pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
 
        }
        *pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
 
-       /* At least try for generic read. */
-       *pacc_requested = GENERIC_READ_ACCESS;
+       /* At least try for generic read|execute - Everyone gets that. */
+       *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
 
        /* root gets anything. */
        if (geteuid() == sec_initial_uid()) {
 
        /* root gets anything. */
        if (geteuid() == sec_initial_uid()) {