sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code

Expand the comment explaining why user_in_group_sid is

Browse Source 
not reliable for winbindd users from foreign domains.
Jeremy.
This commit is contained in:
Jeremy Allison 2009-05-08 10:11:38 -07:00
parent b79eff843b
commit f47b220ce1
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
source3/smbd/posix_acls.c
View File

@ -1297,7 +1297,12 @@ static bool uid_entry_in_group( canon_ace *uid_ace, canon_ace *group_ace )
return False;
}
/* notice that this is not reliable for users exported by winbindd! */
/*
* user_in_group_sid() uses create_token_from_username()
* which creates an artificial NT token given just a username,
* so this is not reliable for users from foreign domains
* exported by winbindd!
*/
return user_in_group_sid(u_name, &group_ace->trustee);
}