auth: Only process resource groups if NETLOGON_RESOURCE_GROUPS flag is set
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Mon, 7 Nov 2022 06:27:24 +0000 (19:27 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Wed, 8 Feb 2023 00:03:39 +0000 (00:03 +0000)
commit3d846db42db15465d47f2c5e285d3e958bdf5f98
treed2cb009d393a991804edc3781cacd9afd5f9cb08
parentc7b76764dc10fd2479f51ddf3fb4f1eb20790371
auth: Only process resource groups if NETLOGON_RESOURCE_GROUPS flag is set

MS-PAC section 2.5 states that if the resource_groups member is
non-NULL, or resource_groups.groups.count is not zero, the
NETLOGON_RESOURCE_GROUPS flag MUST be set. Thus, there's no need to
process resource groups if the flag is not set.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
auth/auth_sam_reply.c