s3:auth: add add_builtin_guests() handling to finalize_local_nt_token()
commit2c148eb8ec36fc22caa9f47dada8f387eee80ab0
authorStefan Metzmacher <metze@samba.org>
Tue, 6 Mar 2018 22:26:28 +0000 (6 23:26 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 20 Mar 2018 20:28:30 +0000 (20 21:28 +0100)
tree4b97d7d1f8bac41951948e5f3806eefa6db3fbf1
parent8557994f1f535f81acd240eec2c462b0bb1d5b19
s3:auth: add add_builtin_guests() handling to finalize_local_nt_token()

We should add Builtin_Guests depending on the current token
not based on 'is_guest'. Even authenticated users can be member
a guest related group and therefore get Builtin_Guests.

Sadly we still need to use 'is_guest' within create_local_nt_token()
as we only have S-1-22-* SIDs there and still need to
add Builtin_Guests.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13328

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
(cherry picked from commit e8dc55d2b969b670322a913799d1af459a1000e7)
source3/auth/token_util.c