kerberos auth info3 should contain resource group ids available from pac_logon
commitefadcb31215f9ccaf7942341c698a8eb2ac166ce
authorNoel Power <noel.power@suse.com>
Wed, 10 Jun 2015 12:13:25 +0000 (10 13:13 +0100)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 11 Jun 2015 02:42:10 +0000 (11 04:42 +0200)
tree8537ff5925b20ab1cfb74e9212ebf19f8fd46d3f
parentb51ad15618f77b9552a2e23f7d28c4c39a65f6b1
kerberos auth info3 should contain resource group ids available from pac_logon

successful pam auth (e.g. from ssh) will cache group sids (but not any
resource group sids)) The subsequent cached entry used for groups lookups
can be missing those resource groups

Signed-off-by: Noel Power <noel.power@suse.com>
Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source3/winbindd/winbindd_pam.c