From 170c07aea00e0afa2deb52e3469692621023f81a Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Wed, 18 Jul 2012 23:01:01 +0200 Subject: [PATCH] s3-winbind: Fix bug #9052 resolving our own "Domain Local" groups. We don't resolve our own "Domain Local" groups since bug #7843 has been fixed. So we need to add the add resource groups to the sid list too. Signed-off-by: Andreas Schneider --- source3/winbindd/winbindd_util.c | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/source3/winbindd/winbindd_util.c b/source3/winbindd/winbindd_util.c index 63cb2d2..57511dc 100644 --- a/source3/winbindd/winbindd_util.c +++ b/source3/winbindd/winbindd_util.c @@ -1033,12 +1033,18 @@ NTSTATUS lookup_usergroups_cached(struct winbindd_domain *domain, return NT_STATUS_UNSUCCESSFUL; } - /* Skip Domain local groups outside our domain. - We'll get these from the getsidaliases() RPC call. */ + /* + * Before bug #7843 the "Domain Local" groups where added with a + * lookupuseraliases call, but this isn't done anymore for our domain + * so we need to resolve resource groups here. + * + * When to use Resource Groups: + * http://technet.microsoft.com/en-us/library/cc753670%28v=WS.10%29.aspx + */ status = sid_array_from_info3(mem_ctx, info3, user_sids, &num_groups, - false, true); + false, false); if (!NT_STATUS_IS_OK(status)) { TALLOC_FREE(info3); -- 1.7.10.4