git.samba.org
/
kai
/
samba.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
83d67f9
)
r10474: We better ignore builtin SIDs from the Active Directory DC to prevent
author
Günther Deschner
<gd@samba.org>
Sat, 24 Sep 2005 11:33:55 +0000
(11:33 +0000)
committer
Gerald (Jerry) Carter
<jerry@samba.org>
Wed, 10 Oct 2007 16:03:42 +0000
(11:03 -0500)
that AD's builtin groups mixup with our own builtin groups.
Guenther
(This used to be commit
9930013161f1ae59e7aed1b397b79792d384f1ba
)
source3/nsswitch/winbindd_ads.c
patch
|
blob
|
history
diff --git
a/source3/nsswitch/winbindd_ads.c
b/source3/nsswitch/winbindd_ads.c
index 7851fdabc36c9c2ef500cdc5c7f379bf5a06cdcb..eda6dea2c48262bddbc3fd02bf95fd1884612ad2 100644
(file)
--- a/
source3/nsswitch/winbindd_ads.c
+++ b/
source3/nsswitch/winbindd_ads.c
@@
-613,9
+613,16
@@
static NTSTATUS lookup_usergroups(struct winbindd_domain *domain,
add_sid_to_array(mem_ctx, &primary_group, user_sids, num_groups);
- for (i=0;i<count;i++)
+ for (i=0;i<count;i++) {
+
+ /* ignore Builtin groups from ADS - Guenther */
+ if (sid_check_is_in_builtin(&sids[i])) {
+ continue;
+ }
+
add_sid_to_array_unique(mem_ctx, &sids[i],
user_sids, num_groups);
+ }
status = (user_sids != NULL) ? NT_STATUS_OK : NT_STATUS_NO_MEMORY;