winbindd: use passdb backend for well-known SIDs
authorRalph Boehme <slow@samba.org>
Thu, 30 Mar 2017 21:41:59 +0000 (23:41 +0200)
committerJeremy Allison <jra@samba.org>
Sat, 1 Apr 2017 15:33:14 +0000 (17:33 +0200)
commit6b7a14b4b9c3411bd2e05383917e8fdedae51c90
tree4f2fcfe285397df45916ca70de2f7ad6ebb31355
parent3a9ea1873ca8e07fad18d5aa07097f8ead335270
winbindd: use passdb backend for well-known SIDs

On a DC well-known SIDs like S-1-1-0 (everyone) *must* be handled by the
local domain, otherwise something simple like this fails with
WBC_ERR_DOMAIN_NOT_FOUND:

$ make testenv SELFTEST_TESTENV=nt4_dc SCREEN=1

localnt4dc2$ ./bin/wbinfo --sid-to-name S-1-1-0
failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
Could not lookup sid S-1-1-0

On a member server asking our DC works and is what we're currently
doing, but changing it to ask passdb avoids the overhead.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=12727

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
selftest/knownfail
source3/winbindd/winbindd_util.c