Fix SAMR server for winbindd access. Ensure we allow

MAX_ACCESS to be mapped to what we're giving Everyone.
Jeremy.
(cherry picked from commit cb49ceb25d8be05148e3081a73f8db10915963f0)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index d73c25d374362ea1f1c059e7f967f150cca32b2e..d4390aaea541cc66d5aaef03fddd9bcccfe304f8 100644 (file)
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -264,8 +264,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
        }
        *pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
 
-       /* At least try for generic read. */
-       *pacc_requested = GENERIC_READ_ACCESS;
+       /* At least try for generic read|execute - Everyone gets that. */
+       *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
 
        /* root gets anything. */
        if (geteuid() == sec_initial_uid()) {