| commit | d626b5c6d401e72296cf570e50f324c145fd70e0 | |
| author | Andrew Bartlett <abartlet@samba.org> | |
| Fri, 28 May 2004 08:57:00 +0000 (28 08:57 +0000) | ||
| committer | Gerald (Jerry) Carter <jerry@samba.org> | |
| Wed, 10 Oct 2007 15:51:50 +0000 (10 10:51 -0500) | ||
| tree | 7ce75bcfbefaa730baf32279ef31dd22c635497e | treesnapshot (tar.gz zip) |
| parent | b562fe9fbca4971059b913959bbaca02af42c1a4 | commitdiff |
r936: Fix a rather weird error that crippled my site, when we upgraded to
Samba 3.0.4.
If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process.
For reasons I can't understand, the client-side 'heck, what happened'
bailout causes the connection to the DC to be dropped, and causes the
mandetory profile not to be loaded. (This also only occours after a reboot)
Return the members of 'administrators', and it all works fine.
The reason we hit this is because we run winbindd (to support
pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was
messing things up. As we don't care what type of thing this is,
provided it exists in the group mapping db, we should not bother
winbindd here.
Andrew Bartlett
Samba 3.0.4.
If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process.
For reasons I can't understand, the client-side 'heck, what happened'
bailout causes the connection to the DC to be dropped, and causes the
mandetory profile not to be loaded. (This also only occours after a reboot)
Return the members of 'administrators', and it all works fine.
The reason we hit this is because we run winbindd (to support
pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was
messing things up. As we don't care what type of thing this is,
provided it exists in the group mapping db, we should not bother
winbindd here.
Andrew Bartlett
| source/passdb/lookup_sid.c | diffblobblamehistory |