kerberos auth info3 should contain resource group ids available from pac_logon
commit8782e069bad6ba31a85c4b9ac30eb99c4bbcd2ef
authorNoel Power <noel.power@suse.com>
Wed, 10 Jun 2015 12:13:25 +0000 (10 13:13 +0100)
committerKarolin Seeger <kseeger@samba.org>
Sun, 5 Jul 2015 19:30:15 +0000 (5 21:30 +0200)
tree91bc08aa242ae9e6039ab0172eace076bbe68d56
parentfcc711255ae1b16d69e6d796a24d3119b9866309
kerberos auth info3 should contain resource group ids available from pac_logon

successful pam auth (e.g. from ssh) will cache group sids (but not any
resource group sids)) The subsequent cached entry used for groups lookups
can be missing those resource groups

Signed-off-by: Noel Power <noel.power@suse.com>
Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit efadcb31215f9ccaf7942341c698a8eb2ac166ce)
source3/winbindd/winbindd_pam.c