[PR PATCH] idmap_rid: default group always set to "Domain Users"

[Volker Lendecke]

On Wed, Apr 18, 2018 at 12:12:51PM +0300, Isaac Boukris wrote:
> Thanks, from this doc it sounds that queryuseraliases also doesn't
> provide nesting groups, quote:
> "For each SID value in SidArray, the server MUST determine the union
> of all database objects in the domain referenced by
> DomainHandle.Object with class group and groupType
> GROUP_TYPE_SECURITY_RESOURCE whose member value contains the SID"

That's one of the points. You have to do the expansion correctly
yourself. That's what makes it so difficult. As I said -- we've been
there, we've done that and we're your of ideas. Feel free.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de