From 9d16dac3d14b11f327f2898e3fe45f1b390bead4 Mon Sep 17 00:00:00 2001
From: Gerald Carter <jerry@samba.org>
Date: Tue, 22 Apr 2003 03:16:18 +0000
Subject: wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries
 can get the credentials from secrets.tdb (This used to be commit
 cf6af44a2464cf1d9bea909dbc0e20829bdc2665)

---
 source3/rpc_server/srv_samr_nt.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index 6e1b6f2160..5a8a16b256 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -300,11 +300,16 @@ static NTSTATUS load_group_domain_entries(struct samr_info *info, DOM_SID *sid)
 		DEBUG(10,("load_group_domain_entries: already in memory\n"));
 		return NT_STATUS_OK;
 	}
+	
+
+	become_root();
 
 	if (!pdb_enum_group_mapping(SID_NAME_DOM_GRP, &map, (int *)&group_entries, ENUM_ONLY_MAPPED, MAPPING_WITHOUT_PRIV)) {
 		DEBUG(1, ("load_group_domain_entries: pdb_enum_group_mapping() failed!\n"));
 		return NT_STATUS_NO_MEMORY;
 	}
+	
+	unbecome_root();
 
 	info->disp_info.num_group_account=group_entries;
 
-- 
cgit