summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2009-05-18 14:26:37 -0700
committerKarolin Seeger <kseeger@samba.org>2009-08-10 17:53:12 +0200
commitdc70a2b87959bb3b808ea288fdce6447a04ccfa0 (patch)
treeee7e98afc3aef27feed928302a8769a009c9094f
parent559d9bd0363f4fb1f7e814e32fd024695adfcfb4 (diff)
downloadsamba-dc70a2b87959bb3b808ea288fdce6447a04ccfa0.tar.gz
samba-dc70a2b87959bb3b808ea288fdce6447a04ccfa0.tar.xz
samba-dc70a2b87959bb3b808ea288fdce6447a04ccfa0.zip
Fix SAMR server for winbindd access. Ensure we allow MAX_ACCESS to be mapped to what we're giving Everyone. Jeremy.
Fixes bug #6504. (cherry picked from commit 4e854cb52cfb4f3c25c92324c6e7505f1c8290b3) (cherry picked from commit eb1c74737e5d40ae85102613a4dfcd89a3235feb)
-rw-r--r--source/rpc_server/srv_samr_nt.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c
index 47aa1e9a9b0..92a198dd3b8 100644
--- a/source/rpc_server/srv_samr_nt.c
+++ b/source/rpc_server/srv_samr_nt.c
@@ -260,8 +260,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
}
*pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
- /* At least try for generic read. */
- *pacc_requested = GENERIC_READ_ACCESS;
+ /* At least try for generic read|execute - Everyone gets that. */
+ *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
/* root gets anything. */
if (geteuid() == sec_initial_uid()) {