[PATCH] dsdb: Add tokenGroupsGlobalAndUniversal, tokenGroups, tokenGroupsNoGCAcceptable

[Stefan (metze) Metzmacher]

Hi Arvid,

> the attached patch, developed by Garming and Andrew, adds support for the 
> operational attributes tokenGroupsGlobalAndUniversal, tokenGroups and 
> tokenGroupsNoGCAcceptable to Samba AD DC.
> 
> The tokenGroupsGlobalAndUniversal attribute (aka "TGGAU") is required by 
> Sharepoint for access control during document search. Without this attribute 
> Sahrepoint search shows no results, even when a users searches for his own 
> documents (see http://support.microsoft.com/kb/331951/en-us or 
> http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx 
> ).
> 
> We received positive feedback about the effectiveness of the patch from an 
> independent test site. Please review.

Can you please file a bug report for this so that we can include the bug
reference
in the commit message and backport this fix to at lease 4.2 (maybe also
4.1 and 4.0)

The patch looks good to me and can get a Reviewed-by: me if the
Bug: https:... line is added.

Thanks!
metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20141222/e894eaa1/attachment.pgp>