[PATCH] recognise local groups in ads_atype_map()

Chere Zhou qzhou at isilon.com
Thu May 15 17:43:46 GMT 2003

Yeap, this will make domain local groups work in ADS, but only for any group 
members in the same domain.  

Local groups can contain users and groups from other domains, trusted 
domains, which still does not work.  Is there anybody interested in local 
group membership across domains?  I am looking into solving this.  Looks like 
I need to do quite some LDAP queries.  Ideas and discussions are welcomed.


>Index: libads/ads_utils.c
>RCS file: /home/project/cvs/samba/source/libads/ads_utils.c,v
>retrieving revision
>diff -u -r1.1.1.1 ads_utils.c
>--- libads/ads_utils.c  2003/04/15 13:57:41
>+++ libads/ads_utils.c  2003/05/15 10:56:15
>@@ -126,6 +126,8 @@
>        switch (atype & 0xF0000000) {
>        case ATYPE_GLOBAL_GROUP:
>                return SID_NAME_DOM_GRP;
>+               return SID_NAME_ALIAS;
>        case ATYPE_ACCOUNT:
>                return SID_NAME_USER;
>        default:
>-- Luke
>Luke Howard | PADL Software Pty Ltd | www.padl.com

More information about the samba-technical mailing list