sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-26 21:57:41 +03:00
Code

s3:winbind: fix the getgroups implementation to include the user sid's GID in case of ID_TYPE_BOTH

Browse Source 
This is important for acl checks on the unix level where only a group ace
has been added to the ACL for the user sid, e.g. when accessing Files with
nfs or local unix processes.

Signed-off-by: Michael Adam <obnox@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Michael Adam 2013-07-26 11:32:34 +02:00
parent f62219e71a
commit 6e41745173
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
source3/winbindd/winbindd_getgroups.c
View File

@ -124,15 +124,17 @@ static void winbindd_getgroups_gettoken_done(struct tevent_req *subreq)
/*
* Convert the group SIDs to gids. state->sids[0] contains the user
* sid, so start at index 1.
* sid. If the idmap backend uses ID_TYPE_BOTH, we might need the
* the id of the user sid in the list of group sids, so map the
* complete token.
*/
state->gids = talloc_array(state, gid_t, state->num_sids-1);
state->gids = talloc_array(state, gid_t, state->num_sids);
if (tevent_req_nomem(state->gids, req)) {
return;
}
state->num_gids = 0;
state->next_sid = 1;
state->next_sid = 0;
subreq = wb_sids2xids_send(state, state->ev,
&state->sids[state->next_sid], 1);