From 89d086948eb02ad62542296fe15bac6e1a501b45 Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Thu, 13 Jul 2006 16:28:38 +0000 Subject: [PATCH] r17016: Different and smaller fix for the valid users = username problem. If no winbind is around, the best we can do to get the user's token correct is to ask unix via create_token_from_username. More investigation is needed if this also fixes the +groupname for unmapped groups problems more cleanly. Volker --- source/auth/auth_util.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/source/auth/auth_util.c b/source/auth/auth_util.c index 823bf8c32..9fcaffa3d 100644 --- a/source/auth/auth_util.c +++ b/source/auth/auth_util.c @@ -950,7 +950,13 @@ NTSTATUS create_local_token(auth_serversupplied_info *server_info) return NT_STATUS_NO_MEMORY; } - if (server_info->was_mapped) { + /* + * If winbind is not around, we can not make much use of the SIDs the + * domain controller provided us with. Likewise if the user name was + * mapped to some local unix user. + */ + + if ((!winbind_ping()) || (server_info->was_mapped)) { status = create_token_from_username(server_info, server_info->unix_name, server_info->guest, -- 2.34.1