wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the creden...

(This used to be commit bb8b63b865b941abecc0d821e710702dd12866fe)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index f174114473b509fe762159f1031f0f7f323a3c4b..794fea56df612f87600cd050503c587b146e0f2e 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -300,11 +300,16 @@ static NTSTATUS load_group_domain_entries(struct samr_info *info, DOM_SID *sid)
                DEBUG(10,("load_group_domain_entries: already in memory\n"));
                return NT_STATUS_OK;
        }
+       
+
+       become_root();
 
        if (!pdb_enum_group_mapping(SID_NAME_DOM_GRP, &map, (int *)&group_entries, ENUM_ONLY_MAPPED, MAPPING_WITHOUT_PRIV)) {
                DEBUG(1, ("load_group_domain_entries: pdb_enum_group_mapping() failed!\n"));
                return NT_STATUS_NO_MEMORY;
        }
+       
+       unbecome_root();
 
        info->disp_info.num_group_account=group_entries;