Uri Simchoni 225b8d6d7c auth: consistent handling of well-known alias as primary gid ...

When a local user has its primary group id mapped to a well-known
alias or a builtin group, smbd accepts logins of such a user, but
fails tree-connects to shares with a "force user" set to this user
with an error of NT_STATUS_INVALID_SID.

This fix causes the connect to succeed and the NT token to resemble
the token that would have been created in a login.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11608

Signed-off-by: Uri Simchoni <uri@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit d8717a038ef82caf05fff611c7cf92aecc436563)

2015-11-23 12:43:20 +01:00

..

auth_builtin.c

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

auth_domain.c

s3:auth_domain: make use of cli_rpc_pipe_open_schannel()

2015-03-12 17:13:43 +01:00

auth_generic.c

Changing log level of two entries to DBG_NOTICE

2015-11-06 15:36:28 +01:00

auth_ntlmssp.c

s3-auth: Fix a possible null pointer dereference

2015-07-17 14:04:01 +02:00

auth_sam.c

auth: Provide a way to use the auth stack for winbindd authentication

2014-06-11 10:18:26 +02:00

auth_samba4.c

auth: Fix an incompatible pointer assignment

2014-07-07 10:58:30 +02:00

auth_script.c

More strlcat/strlcpy truncate checks.

2012-03-30 21:26:07 +02:00

auth_unix.c

s3-auth: Pass talloc context to make_server_info_pw().

2014-02-05 11:41:25 +13:00

auth_util.c

s3-auth: Fix a memory leak in make_server_info_info3()

2015-08-31 10:18:15 +02:00

auth_wbc.c

s3-talloc Change TALLOC_ZERO_P() to talloc_zero()

2011-06-09 12:40:08 +02:00

auth_winbind.c

BUG 9817: Fix 'map untrusted to domain' with NTLMv2.

2013-04-24 17:14:48 +02:00

auth.c

s4-auth: Do not override the NT_STATUS_NOT_IMPLEMENTED error for winbindd

2014-07-04 02:52:35 +02:00

check_samsec.c

Convert all uses of uint32/16/8 to _t in source3/auth.

2015-05-13 19:11:24 +02:00

pampass.c

s3: Fix pam_authenticate() when lp_null_passwords() is true

2015-05-04 18:24:21 +02:00

pass_check.c

auth: Remove support for HAVE_TRUNCATED_SALT from pass_check.c

2014-04-15 12:32:09 +02:00

proto.h

Convert all uses of uint32/16/8 to _t in source3/auth.

2015-05-13 19:11:24 +02:00

server_info_sam.c

s3-auth: Steal the memory to avoid duplication.

2014-03-13 15:08:26 +01:00

server_info.c

auth: consistent handling of well-known alias as primary gid

2015-11-23 12:43:20 +01:00

token_util.c

Convert all uint32/16/8 to _t in a grab-bag of remaining files.

2015-05-14 22:16:56 +02:00

user_info.c

s3-auth: Finally change make_user_info_*() use a parent talloc context

2014-04-02 11:05:46 +02:00

user_krb5.c

Changing log level of two entries to DBG_NOTICE

2015-11-06 15:36:28 +01:00

user_util.c

s3:auth: add some const to user_in_list()

2014-11-14 23:27:05 +01:00

wscript_build

build: get rid of vars=locals() in source3/auth/wscript_build

2013-09-24 23:00:31 +02:00