From 201725e871f40b9e3d3e8530251f0caee51cac43 Mon Sep 17 00:00:00 2001 From: Jeremy Allison Date: Mon, 18 May 2009 14:26:37 -0700 Subject: [PATCH] Fix SAMR server for winbindd access. Ensure we allow MAX_ACCESS to be mapped to what we're giving Everyone. Jeremy. --- source/rpc_server/srv_samr_nt.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diff --git a/source/rpc_server/srv_samr_nt.c b/source/rpc_server/srv_samr_nt.c index c3464a8..7dc81dd 100644 --- a/source/rpc_server/srv_samr_nt.c +++ b/source/rpc_server/srv_samr_nt.c @@ -261,8 +261,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token, } *pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS; - /* At least try for generic read. */ - *pacc_requested = GENERIC_READ_ACCESS; + /* At least try for generic read|execute - Everyone gets that. */ + *pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS; /* root gets anything. */ if (geteuid() == sec_initial_uid()) { -- 1.6.2.5