[PATCH] dsdb: Add tokenGroupsGlobalAndUniversal, tokenGroups, tokenGroupsNoGCAcceptable

Stefan (metze) Metzmacher metze at samba.org
Mon Dec 22 05:18:17 MST 2014

Hi Arvid,

> the attached patch, developed by Garming and Andrew, adds support for the 
> operational attributes tokenGroupsGlobalAndUniversal, tokenGroups and 
> tokenGroupsNoGCAcceptable to Samba AD DC.
> The tokenGroupsGlobalAndUniversal attribute (aka "TGGAU") is required by 
> Sharepoint for access control during document search. Without this attribute 
> Sahrepoint search shows no results, even when a users searches for his own 
> documents (see http://support.microsoft.com/kb/331951/en-us or 
> http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx 
> ).
> We received positive feedback about the effectiveness of the patch from an 
> independent test site. Please review.

Can you please file a bug report for this so that we can include the bug
in the commit message and backport this fix to at lease 4.2 (maybe also
4.1 and 4.0)

The patch looks good to me and can get a Reviewed-by: me if the
Bug: https:... line is added.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20141222/e894eaa1/attachment.pgp>

More information about the samba-technical mailing list