Created attachment 10555 [details] 0001-dsdb-Add-tokenGroupsGlobalAndUniversal-tokenGroups-t.patch The attached patch, developed by Garming and Andrew, adds support for the operational attributes tokenGroupsGlobalAndUniversal, tokenGroups and tokenGroupsNoGCAcceptable to Samba AD DC. The tokenGroupsGlobalAndUniversal attribute (aka "TGGAU") is required by Sharepoint for access control during document search. Without this attribute Sharepoint search shows no results, even when a users searches for his own documents (see http://support.microsoft.com/kb/331951/en-us or http://blogs.msdn.com/b/russmax/archive/2010/01/20/whythe-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx ). We received positive feedback about the effectiveness of the patch from an independent test site. Please review.
Fixed link: http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx
Created attachment 10573 [details] Patch for v4-2-test
Created attachment 10574 [details] Patch for v4-1-test
Created attachment 10575 [details] Patch for v4-0-test
*** Bug 11045 has been marked as a duplicate of this bug. ***
Pushed to autobuild-v4-[0|1|2]-test.
Patch seems to break autobuild: Traceback (most recent call last): File "/memdisk/kseeger/a41/b21972/samba/source4/dsdb/tests/python/token_group.py", line 500, in <module> if not runner.run(unittest.makeSuite(TokenTest)).wasSuccessful(): NameError: name 'TokenTest' is not defined command: python /memdisk/kseeger/a41/b21972/samba/source4/dsdb/tests/python/token_group.py $SERVER -U"$USERNAME%$PASSWORD" --workgroup=$DOMAIN 2>&1 | /memdisk/kseeger/a41/b21972/samba/selftest/filter-subunit --fail-on-empty --prefix="samba4.tokengroups.python(dc)." --suffix="(dc:local)" expanded command: python /memdisk/kseeger/a41/b21972/samba/source4/dsdb/tests/python/token_group.py localdc -U"Administrator%locDCpass1" --workgroup=SAMBADOMAIN 2>&1 | /memdisk/kseeger/a41/b21972/samba/selftest/filter-subunit --fail-on-empty --prefix="samba4.tokengroups.python(dc)." --suffix="(dc:local)" ERROR: Testsuite[samba4.tokengroups.python(dc)] REASON: Exit code was 1 Re-trying without this patch now.
Created attachment 10636 [details] Patch for v4-2-test This should pass autobuild in v4-2-test now.
Comment on attachment 10636 [details] Patch for v4-2-test The other two patches also appear to need the change to running both StaticTokenTest and DynamicTokenTest.
Pushed to autobuild-v4-2-test...
Pushed to v4-2-test. Closing out bug report. Thanks!
Re-opening and assigning to Garming to provide updated fixes for v4-1-test and v4-0-test.
Created attachment 10667 [details] Patch for v4.1 test Passes the samba4.tokengroups.python(dc), so there should be no problem with autobuild.
Created attachment 10668 [details] Patches for v4-0-test
Pushed to autobuild-v4-[0|1]-test.
Pushed to v4-[0|1]-test.