Date: Tue Feb 25 02:20:46 2003
Author: abartlet
Update of /data/cvs/samba/source/nsswitch
In directory dp.samba.org:/tmp/cvs-serv11504/nsswitch
Modified Files:
winbindd_ads.c
Log Message:
Fix a really nasty bug where some users in AD domains (particularly child
domains) would not have the tokenGroups or memberOf attributes filled in.
This would cause a user to have no supplementary group membership.
Detect this by the fact that the primaryGid must be present in the tokenGroups,
and if it isn't (ie, if there is no tokenGroups at all), do a server-side
search on all groups using the 'member' attribute and the user's DN.
Andrew Bartlett
Revisions:
winbindd_ads.c 1.63 => 1.64
http://www.samba.org/cgi-bin/cvsweb/samba/source/nsswitch/winbindd_ads.c?r1=1.63&r2=1.64
