Joseph Sutton 7050e05742 auth: Store group attributes in auth_user_info_dc ...

Group expansion, performed in dsdb_expand_nested_groups(), now
incorporates a check of the type of each group. Those that are resource
groups receive the SE_GROUP_RESOURCE bit in the attributes which are now
carried alongside each group SID.

Whereas before, in auth_convert_user_info_dc_sambaseinfo() and
auth_convert_user_info_dc_saminfo6(), we invariantly used the flag
combination SE_GROUP_MANDATORY | SE_GROUP_ENABLED_BY_DEFAULT |
SE_GROUP_ENABLED to set attributes in the PAC, we now take the correct
attributes from user_info_dc.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-02-08 00:03:39 +00:00

..

ldb_modules

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00

cracknames.c

CVE-2020-25722 s4/cracknames: add comment pointing to samldb spn handling

2021-11-09 19:45:33 +00:00

samdb_privilege.c

s4-auth Remove event context from privilage database handling

2010-12-21 15:10:38 +11:00

samdb.c

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00

samdb.h

auth: Store group attributes in auth_user_info_dc

2023-02-08 00:03:39 +00:00