Idra, your privileges patch allowed login only with tdbsam. The problem is

that pdb_default_get_privilege_set returns NOT_IMPLEMENTED and not a privilege
set that does not grant anything. I don't really understand privileges yet, so
work around that by not failing if pdb_get_privilege_set fails.

Volker

diff --git a/source/auth/auth_util.c b/source/auth/auth_util.c
index 018d3b185148b88acc20faa8bb91f2d5be636703..871b399b86dcb1eaeed7af58b910dd1cf03c9681 100644 (file)
--- a/source/auth/auth_util.c
+++ b/source/auth/auth_util.c
@@ -836,7 +836,7 @@ static NTSTATUS add_privileges(auth_serversupplied_info **server_info)
 
        init_privilege(&privs);
        if (!pdb_get_privilege_set((*server_info)->ptok, privs))
-               return NT_STATUS_UNSUCCESSFUL;
+               DEBUG(1, ("Could not add privileges\n"));
 
        (*server_info)->privs = privs;