s4:dcesrv_samr - Also "OpenGroup" needs to support universal groups

diff --git a/source4/rpc_server/samr/dcesrv_samr.c b/source4/rpc_server/samr/dcesrv_samr.c
index b61c6f471d28a50806af2267d94cc103e55ad8ea..77899aa4e6b26b3083c9fc438d7a7d9da2cda71e 100644 (file)
--- a/source4/rpc_server/samr/dcesrv_samr.c
+++ b/source4/rpc_server/samr/dcesrv_samr.c
@@ -2047,9 +2047,10 @@ static NTSTATUS dcesrv_samr_OpenGroup(struct dcesrv_call_state *dce_call, TALLOC
        /* search for the group record */
        ret = gendb_search(d_state->sam_ctx,
                           mem_ctx, d_state->domain_dn, &msgs, attrs,
-                          "(&(objectSid=%s)(objectclass=group)"
-                          "(grouptype=%d))",
+                          "(&(objectSid=%s)(objectClass=group)"
+                          "(|(groupType=%d)(groupType=%d)))",
                           ldap_encode_ndr_dom_sid(mem_ctx, sid),
+                          GTYPE_SECURITY_UNIVERSAL_GROUP,
                           GTYPE_SECURITY_GLOBAL_GROUP);
        if (ret == 0) {
                return NT_STATUS_NO_SUCH_GROUP;