summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2009-05-18 14:26:37 -0700
committerKarolin Seeger <kseeger@samba.org>2009-08-04 15:11:37 +0200
commiteb1c74737e5d40ae85102613a4dfcd89a3235feb (patch)
tree5a0c619ea3bbd56e7972754ea57a1b2cb1419cf1
parent0c75e4da04b27df3c079c22676b5fbf05521d93f (diff)
downloadsamba-eb1c74737e5d40ae85102613a4dfcd89a3235feb.tar.gz
samba-eb1c74737e5d40ae85102613a4dfcd89a3235feb.tar.xz
samba-eb1c74737e5d40ae85102613a4dfcd89a3235feb.zip
Fix SAMR server for winbindd access. Ensure we allow MAX_ACCESS to be mapped to what we're giving Everyone. Jeremy.
Fixes bug #6504. (cherry picked from commit 4e854cb52cfb4f3c25c92324c6e7505f1c8290b3)
-rw-r--r--source/rpc_server/srv_samr_nt.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c
index 47aa1e9a9b0..92a198dd3b8 100644
--- a/source/rpc_server/srv_samr_nt.c
+++ b/source/rpc_server/srv_samr_nt.c
@@ -260,8 +260,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
}
*pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
- /* At least try for generic read. */
- *pacc_requested = GENERIC_READ_ACCESS;
+ /* At least try for generic read|execute - Everyone gets that. */
+ *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
/* root gets anything. */
if (geteuid() == sec_initial_uid()) {