[PATCH] add alias sids to required_membership_sid-feature

Andrew Bartlett abartlet at samba.org
Wed Jul 21 22:38:06 GMT 2004


On Thu, 2004-07-22 at 06:11, Guenther Deschner wrote:
> Hi,
> 
> the latest version now avoids any potential network traffic generates localsids
> locally (I hope).

This still looks wrong.  (Sorry!)

If I was a member of 'domain admins', and that group is in the alias
'administrators', would this code pick it up?

I would have expected this code to be called for every SID the user
already has.

+               /* Add nested group memberships */
+               if (!pdb_enum_alias_memberships(user_sid, &alias_sids,
&num_aliases)) {
+                       DEBUG(0,("could not enumerate aliases\n"));
+                       return NT_STATUS_UNSUCCESSFUL;
+               }

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at samba.org
Authentication Developer, Samba Team            http://samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040722/f4ddc7ad/attachment.bin


More information about the samba-technical mailing list