Fix bug 5500 -- thanks to mathion at thorrovydeti.com for reporting

(cherry picked from commit 996c3ce6f0dbe79b0679ae30afd873c24fe5b1eb)
(This used to be commit 1f86c7a2a19e66948c9b51572d3c078b6e03ef52)

diff --git a/source3/rpc_server/srv_lsa_nt.c b/source3/rpc_server/srv_lsa_nt.c
index 7c33bd0d4f4969669b7a684d0805e3f799f2be1b..7be139d3727d79ffc5c481ed99fd23527ba4f559 100644 (file)
--- a/source3/rpc_server/srv_lsa_nt.c
+++ b/source3/rpc_server/srv_lsa_nt.c
@@ -491,7 +491,9 @@ NTSTATUS _lsa_EnumTrustDom(pipes_struct *p,
        if (!(info->access & LSA_POLICY_VIEW_LOCAL_INFORMATION))
                return NT_STATUS_ACCESS_DENIED;
 
+       become_root();
        nt_status = pdb_enum_trusteddoms(p->mem_ctx, &num_domains, &domains);
+       unbecome_root();
 
        if (!NT_STATUS_IS_OK(nt_status)) {
                return nt_status;