[PATCH] s3:winbind: gid 0 in getgrgid must be resolved locally

[Christof Schmitt]

On Mon, Sep 25, 2017 at 05:14:32PM +0200, Volker Lendecke via samba-technical wrote:
> On Wed, Sep 13, 2017 at 12:19:28PM +0200, Ralph Wuerthner via samba-technical wrote:
> > please see attached patch to address the following winbind error message:
> > 
> > Jul 26 14:37:43 sambatest winbindd[24983]: [2017/07/26 14:37:43.057886, 0,
> > pid=24983, effective(0, 0), real(0, 0), class=winbind]
> > ../source3/winbindd/winbindd_group.c:45(fill_grent)
> > Jul 26 14:37:43 sambatest winbindd[24983]: Failed to find domain 'Unix
> > Group'. Check connection to trusted domains!
> 
> What about filtering S-1-2-22 in wb_getgrsid_send already?

Something like dom_sid_in_domain(global_sid_Unix_Group, group_sid)?

b_getpwsid_send should also get a similar check for local users:
dom_sid_in_domain(global_sid_Unix_Users, user_sid)

Christof