From 6f99b229dbf4a9b72fe825ebb2e3751ef3d7b680 Mon Sep 17 00:00:00 2001
From: Gerald Carter <jerry@samba.org>
Date: Tue, 22 Apr 2003 03:15:32 +0000
Subject: wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries
 can get the credentials from secrets.tdb (This used to be commit
 bb8b63b865b941abecc0d821e710702dd12866fe)

---
 source3/rpc_server/srv_samr_nt.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index f174114473b..794fea56df6 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -300,11 +300,16 @@ static NTSTATUS load_group_domain_entries(struct samr_info *info, DOM_SID *sid)
 		DEBUG(10,("load_group_domain_entries: already in memory\n"));
 		return NT_STATUS_OK;
 	}
+	
+
+	become_root();
 
 	if (!pdb_enum_group_mapping(SID_NAME_DOM_GRP, &map, (int *)&group_entries, ENUM_ONLY_MAPPED, MAPPING_WITHOUT_PRIV)) {
 		DEBUG(1, ("load_group_domain_entries: pdb_enum_group_mapping() failed!\n"));
 		return NT_STATUS_NO_MEMORY;
 	}
+	
+	unbecome_root();
 
 	info->disp_info.num_group_account=group_entries;
 
-- 
cgit