s3-winbind: Allow sec_initial_uid() to store creds.

[samba.git] / source3 / winbindd / winbindd_ccache_access.c

diff --git a/source3/winbindd/winbindd_ccache_access.c b/source3/winbindd/winbindd_ccache_access.c
index 5557b959f05afbf54c34e2c74ad06a3d614851e6..7787b3e0071754f0d755d46c2708c16eb8a43be2 100644 (file)
--- a/source3/winbindd/winbindd_ccache_access.c
+++ b/source3/winbindd/winbindd_ccache_access.c
@@ -168,7 +168,7 @@ static bool check_client_uid(struct winbindd_cli_state *state, uid_t uid)
                return False;
        }
 
-       if (uid != ret_uid) {
+       if (uid != ret_uid && ret_uid != sec_initial_uid()) {
                DEBUG(1, ("check_client_uid: Client lied about its uid: said %u, "
                        "actually was %u; denying access\n",
                        (unsigned int)uid, (unsigned int)ret_uid));