[PATCH] dsdb: Add tokenGroupsGlobalAndUniversal, tokenGroups, tokenGroupsNoGCAcceptable

[Arvid Requate]

Hello,

the attached patch, developed by Garming and Andrew, adds support for the 
operational attributes tokenGroupsGlobalAndUniversal, tokenGroups and 
tokenGroupsNoGCAcceptable to Samba AD DC.

The tokenGroupsGlobalAndUniversal attribute (aka "TGGAU") is required by 
Sharepoint for access control during document search. Without this attribute 
Sahrepoint search shows no results, even when a users searches for his own 
documents (see http://support.microsoft.com/kb/331951/en-us or 
http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx 
).

We received positive feedback about the effectiveness of the patch from an 
independent test site. Please review.

Cheers,
Arvid

-- 
Arvid Requate
Open Source Software Engineer

Univention GmbH
be open.
Mary-Somerville-Str.1
28359 Bremen
Tel. : +49 421 22232-52
Fax : +49 421 22232-99

requate at univention.de
http://www.univention.de

Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-dsdb-Add-tokenGroupsGlobalAndUniversal-tokenGroups-t.patch
Type: text/x-patch
Size: 22067 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20141222/b77e2e36/attachment.bin>