From 07e18e8f7c5687d00160a1760411099736444c7c Mon Sep 17 00:00:00 2001
From: Matthias Dieter Wallnöfer <mdw@samba.org>
Date: Fri, 3 Dec 2010 09:17:01 +0100
Subject: s4:auth/sam.c - specify the SID ignore case better

As per suggestion by metze.
---
 source4/auth/sam.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/source4/auth/sam.c b/source4/auth/sam.c
index 6203b960c4..cbaa2699c7 100644
--- a/source4/auth/sam.c
+++ b/source4/auth/sam.c
@@ -325,12 +325,18 @@ NTSTATUS authsam_expand_nested_groups(struct ldb_context *sam_ctx,
 	}
 
 	status = dsdb_get_extended_dn_sid(dn, &sid, "SID");
-	if (!NT_STATUS_IS_OK(status)) {
+	if (NT_STATUS_EQUAL(status, NT_STATUS_OBJECT_NAME_NOT_FOUND)) {
 		/* If we fail finding a SID then this is no error since it could
 		 * be a non SAM object - e.g. a group with object class
 		 * "groupOfNames" */
 		talloc_free(tmp_ctx);
 		return NT_STATUS_OK;
+	} else if (!NT_STATUS_IS_OK(status)) {
+		DEBUG(0, (__location__ ": when parsing DN %s we failed to parse our SID component, so we cannot calculate the group token: %s\n",
+			  ldb_dn_get_extended_linearized(tmp_ctx, dn, 1),
+			  nt_errstr(status)));
+		talloc_free(tmp_ctx);
+		return status;
 	}
 
 	if (!sam_ctx) {
-- 
cgit