diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2004-05-28 08:57:00 +0000 |
|---|---|---|
| committer | Gerald (Jerry) Carter <jerry@samba.org> | 2007-10-10 10:51:50 -0500 |
| commit | fe8977e12c5b01f9adc8df6b07d91131bd4f7432 (patch) | |
| tree | d21c203ef5c10dadb295b93753e4a918e5ee33d7 /source3 | |
| parent | cb03592c067a8e475a5f96f72aa0e84ba176a747 (diff) | |
| download | samba-fe8977e12c5b01f9adc8df6b07d91131bd4f7432.tar.gz samba-fe8977e12c5b01f9adc8df6b07d91131bd4f7432.tar.bz2 samba-fe8977e12c5b01f9adc8df6b07d91131bd4f7432.zip | |
r936: Fix a rather weird error that crippled my site, when we upgraded to
Samba 3.0.4.
If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process.
For reasons I can't understand, the client-side 'heck, what happened'
bailout causes the connection to the DC to be dropped, and causes the
mandetory profile not to be loaded. (This also only occours after a reboot)
Return the members of 'administrators', and it all works fine.
The reason we hit this is because we run winbindd (to support
pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was
messing things up. As we don't care what type of thing this is,
provided it exists in the group mapping db, we should not bother
winbindd here.
Andrew Bartlett
(This used to be commit d626b5c6d401e72296cf570e50f324c145fd70e0)
Diffstat (limited to 'source3')
| -rw-r--r-- | source3/passdb/lookup_sid.c | 11 |
1 files changed, 4 insertions, 7 deletions
diff --git a/source3/passdb/lookup_sid.c b/source3/passdb/lookup_sid.c index 842db8de5d..d536383ef3 100644 --- a/source3/passdb/lookup_sid.c +++ b/source3/passdb/lookup_sid.c @@ -445,14 +445,11 @@ NTSTATUS sid_to_gid(const DOM_SID *psid, gid_t *pgid) * Group mapping can deal with foreign SIDs */ + if ( local_sid_to_gid(pgid, psid, &name_type) ) + goto success; + if (!winbind_lookup_sid(psid, dom_name, name, &name_type)) { - DEBUG(10,("sid_to_gid: winbind lookup for sid %s failed - trying local.\n", - sid_to_string(sid_str, psid) )); - - if ( local_sid_to_gid(pgid, psid, &name_type) ) - goto success; - - DEBUG(10,("sid_to_gid: no one knows this SID\n")); + DEBUG(10,("sid_to_gid: no one knows the SID %s (tried local, then winbind)\n", sid_to_string(sid_str, psid))); return NT_STATUS_UNSUCCESSFUL; } |