mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
r10474: We better ignore builtin SIDs from the Active Directory DC to prevent
that AD's builtin groups mixup with our own builtin groups.
Guenther
(This used to be commit 9930013161
)
This commit is contained in:
parent
83d67f99aa
commit
da1640d5a1
@ -613,9 +613,16 @@ static NTSTATUS lookup_usergroups(struct winbindd_domain *domain,
|
||||
|
||||
add_sid_to_array(mem_ctx, &primary_group, user_sids, num_groups);
|
||||
|
||||
for (i=0;i<count;i++)
|
||||
for (i=0;i<count;i++) {
|
||||
|
||||
/* ignore Builtin groups from ADS - Guenther */
|
||||
if (sid_check_is_in_builtin(&sids[i])) {
|
||||
continue;
|
||||
}
|
||||
|
||||
add_sid_to_array_unique(mem_ctx, &sids[i],
|
||||
user_sids, num_groups);
|
||||
}
|
||||
|
||||
status = (user_sids != NULL) ? NT_STATUS_OK : NT_STATUS_NO_MEMORY;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user