summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2003-04-22 03:15:32 +0000
committerGerald Carter <jerry@samba.org>2003-04-22 03:15:32 +0000
commit6f99b229dbf4a9b72fe825ebb2e3751ef3d7b680 (patch)
treeba07d69092cb0b3d689f680d0730bf2f7dc9b2b9
parent3996f116c7d08f4624c923ae1868f5c1bcd8a2b2 (diff)
downloadsamba-6f99b229dbf4a9b72fe825ebb2e3751ef3d7b680.tar.gz
samba-6f99b229dbf4a9b72fe825ebb2e3751ef3d7b680.tar.bz2
samba-6f99b229dbf4a9b72fe825ebb2e3751ef3d7b680.zip
wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get the credentials from secrets.tdb
(This used to be commit bb8b63b865b941abecc0d821e710702dd12866fe)
-rw-r--r--source3/rpc_server/srv_samr_nt.c5
1 files changed, 5 insertions, 0 deletions
diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index f174114473..794fea56df 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -300,11 +300,16 @@ static NTSTATUS load_group_domain_entries(struct samr_info *info, DOM_SID *sid)
DEBUG(10,("load_group_domain_entries: already in memory\n"));
return NT_STATUS_OK;
}
+
+
+ become_root();
if (!pdb_enum_group_mapping(SID_NAME_DOM_GRP, &map, (int *)&group_entries, ENUM_ONLY_MAPPED, MAPPING_WITHOUT_PRIV)) {
DEBUG(1, ("load_group_domain_entries: pdb_enum_group_mapping() failed!\n"));
return NT_STATUS_NO_MEMORY;
}
+
+ unbecome_root();
info->disp_info.num_group_account=group_entries;