s3-winbind: Allow sec_initial_uid() to store creds.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Jul  2 23:26:24 CEST 2013 on sn-devel-104
(cherry picked from commit caf3af33deeea9bee61a741fcc991285006cc6f5)

diff --git a/source3/winbindd/winbindd_ccache_access.c b/source3/winbindd/winbindd_ccache_access.c
index 5557b959f05afbf54c34e2c74ad06a3d614851e6..7787b3e0071754f0d755d46c2708c16eb8a43be2 100644 (file)
--- a/source3/winbindd/winbindd_ccache_access.c
+++ b/source3/winbindd/winbindd_ccache_access.c
@@ -168,7 +168,7 @@ static bool check_client_uid(struct winbindd_cli_state *state, uid_t uid)
                return False;
        }
 
-       if (uid != ret_uid) {
+       if (uid != ret_uid && ret_uid != sec_initial_uid()) {
                DEBUG(1, ("check_client_uid: Client lied about its uid: said %u, "
                        "actually was %u; denying access\n",
                        (unsigned int)uid, (unsigned int)ret_uid));