lbcli/security: callback object ACES fall back with no GUID

As with other object ACEs, if there is not a GUID to refer to the ACE
becomes the corresponding non-object ACE.

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/libcli/security/create_descriptor.c b/libcli/security/create_descriptor.c
index d9e1c05f31ba8da93eda57aeb63762ba1f1e07b5..4db23bede184f9d2ef68bc0a732a99e54e3e6267 100644 (file)
--- a/libcli/security/create_descriptor.c
+++ b/libcli/security/create_descriptor.c
@@ -345,9 +345,21 @@ static struct security_acl *calculate_inherited_from_parent(TALLOC_CTX *mem_ctx,
                                case SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT:
                                        tmp_ace->type = SEC_ACE_TYPE_SYSTEM_AUDIT;
                                        break;
-                                default:
-                                        /* all the _CALLBACK types */
-                                        break;
+                               case SEC_ACE_TYPE_ACCESS_ALLOWED_CALLBACK_OBJECT:
+                                       tmp_ace->type = SEC_ACE_TYPE_ACCESS_ALLOWED_CALLBACK;
+                                       break;
+                               case SEC_ACE_TYPE_ACCESS_DENIED_CALLBACK_OBJECT:
+                                       tmp_ace->type = SEC_ACE_TYPE_ACCESS_DENIED_CALLBACK;
+                                       break;
+                               case SEC_ACE_TYPE_SYSTEM_AUDIT_CALLBACK_OBJECT:
+                                       tmp_ace->type = SEC_ACE_TYPE_SYSTEM_AUDIT_CALLBACK;
+                                       break;
+                               default:
+                                       /*
+                                        * SEC_ACE_TYPE_SYSTEM_ALARM_CALLBACK_OBJECT
+                                        * is reserved.
+                                        */
+                                       break;
                                }
                        }