1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00

r10474: We better ignore builtin SIDs from the Active Directory DC to prevent

that AD's builtin groups mixup with our own builtin groups.

Guenther
(This used to be commit 9930013161)
This commit is contained in:
Günther Deschner 2005-09-24 11:33:55 +00:00 committed by Gerald (Jerry) Carter
parent 83d67f99aa
commit da1640d5a1

View File

@ -613,9 +613,16 @@ static NTSTATUS lookup_usergroups(struct winbindd_domain *domain,
add_sid_to_array(mem_ctx, &primary_group, user_sids, num_groups);
for (i=0;i<count;i++)
for (i=0;i<count;i++) {
/* ignore Builtin groups from ADS - Guenther */
if (sid_check_is_in_builtin(&sids[i])) {
continue;
}
add_sid_to_array_unique(mem_ctx, &sids[i],
user_sids, num_groups);
}
status = (user_sids != NULL) ? NT_STATUS_OK : NT_STATUS_NO_MEMORY;