s4:rootdse: only return "tokenGroups", when the client asked for them

metze

diff --git a/source4/dsdb/samdb/ldb_modules/rootdse.c b/source4/dsdb/samdb/ldb_modules/rootdse.c
index d18e41c294091aeb439b9331ec74702178b20f24..f10a125eb618f3424c3be4566f803d6fed308995 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/rootdse.c
+++ b/source4/dsdb/samdb/ldb_modules/rootdse.c
@@ -382,7 +382,7 @@ static int rootdse_add_dynamic(struct ldb_module *module, struct ldb_message *ms
                }
        }
 
-       if (do_attribute(attrs, "tokenGroups")) {
+       if (do_attribute_explicit(attrs, "tokenGroups")) {
                unsigned int i;
                /* Obtain the user's session_info */
                struct auth_session_info *session_info