[Samba] USRMGR and 3.0.23a

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeroen Vriesman wrote:

> And now for the strange thing, when I delete 
> the group "Users" form ldap, it is automatically
> re-created, and adding a group "Users" in the normal
> way, with groupmapping doesn't prevent it from being
> created.

smbd will create the BUILTIN groups Users and Administrators
IFF winbind is running, winbind nested groups = yes, and
the two groups do not exist.

> Does this cause the nt4 usermanager problem?

No.  But I have reproduced the error you reported though.
I expect it is specific to ldapsam.  Attached is a patch.
For what it's worth, I have no problem running usrmgr.exe
with the one exception noted.





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFExLJvIR7qMdg1EfYRAugkAJ9Ig1F46oX/mn6P3DTUJLynV4k2fACfctPD
1l2tRxx2PpIz77PjjV+Nfho=
=0v72
-----END PGP SIGNATURE-----
-------------- next part --------------
=== modified file 'source/rpc_server/srv_samr_nt.c'
--- source/rpc_server/srv_samr_nt.c	
+++ source/rpc_server/srv_samr_nt.c	
@@ -3758,7 +3758,9 @@
 
 	DEBUG(10, ("sid is %s\n", sid_string_static(&alias_sid)));
 
+	become_root();
 	status = pdb_enum_aliasmem(&alias_sid, &sids, &num_sids);
+	unbecome_root();
 
 	if (!NT_STATUS_IS_OK(status)) {
 		return status;