[PATCH] BUILTIN\Administors

Gerald (Jerry) Carter jerry at samba.org
Tue Mar 14 19:47:37 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Volker,

This is a rough patch that implements the following changes:

* modifies create_local_nt_token() to create a BUILTIN\Administrators
  group IFF
  - sid_to_gid(S-1-5-32-544) fails and 'winbind nested groups = yes'
* Add a SID domain to the group mapping enumeration passdb call
  to fix the checks for local and builtin groups.  The SID can be
  NULL if you want the old semantics for internal maintenance.
  I only updated the tdb group mapping code.

Still todo.

* Fix fallback Administrators membership for root and domain Admins
  if nested groups = no or winbindd is not running






cheers, jerry
=====================================================================
I live in a Reply-to-All world.               -----------------------
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEFx3ZIR7qMdg1EfYRAttrAJ4nG7baYZsG3eFIMuNPqiyic98KGACeJE9z
sZ6qX/Rqnd3NwiziusEiNiM=
=AQvt
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: administrators_v1.patch
Type: text/x-patch
Size: 18130 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20060314/c69a2146/administrators_v1.bin


More information about the samba-technical mailing list