diff options
| author | Andrew Tridgell <tridge@samba.org> | 2010-09-02 18:41:45 +1000 |
|---|---|---|
| committer | Andrew Tridgell <tridge@samba.org> | 2010-09-04 12:29:10 +1000 |
| commit | 389d35708ea910e68468648396f405e52907c749 (patch) | |
| tree | 9f93b98b8b33149824fc7d81cb7ebbedb188d241 /libcli/drsuapi/drsuapi.h | |
| parent | 48323d88cc4ca3a08d1bd79c748061c775d57eca (diff) | |
| download | samba-389d35708ea910e68468648396f405e52907c749.tar.gz samba-389d35708ea910e68468648396f405e52907c749.tar.bz2 samba-389d35708ea910e68468648396f405e52907c749.zip | |
torture-lsa: cope with STATUS_SOME_UNMAPPED errors
Now that we support SePrintOperatorPrivilege, an interaction between
the spoolss tests and the privileges tests cause a failure. The
failure happens like this:
- the spoolss.access test creates and then deletes an account with
SePrintOperatorPrivilege privilege
- this leaves the privileges database with an entry for a deleted
account that is still visible via LSA calls. This is correct
behaviour (verified against w2k8r2)
- the lsa.privileges test then enumerates all accounts that have at
least one privilege, and gets the SID for the deleted account
- it then called LookupNames and LookupSids on this deleted account,
and gets an error.
The fix is to not call LookupSids and LookupNames on sids which have
SID_NAME_UNKNOWN as the type
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'libcli/drsuapi/drsuapi.h')
0 files changed, 0 insertions, 0 deletions