[Patch] Bug 11362 primary group missing in kerberos PAC GROUP_MEMBERSHIP_ARRAY

Felix Botner botner at univention.de
Thu Jun 25 06:09:39 MDT 2015


Hi,

this patch adds the primary group to the kerberos PAC_LOGON_INFO
GROUP_MEMBERSHIP_ARRAY.

GPO security filtering is based on the groups in the kerberos pac.
If the primary group is missing and the security filter is the 
primary group, the GPO can not be applied.

More information can be found on https://bugzilla.samba.org/show_bug.cgi?id=11362

Best regards,
Felix

-- 

Felix Botner

Open Source Software Engineer

Univention GmbH
be open
Mary-Somerville-Str.1
28359 Bremen
Tel. : +49 421 22232-0
Fax : +49 421 22232-99

<botner at univention.de>
http://www.univention.de

Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876 


More information about the samba-technical mailing list