From: Jeremy Allison <jra@samba.org>
Date: Mon, 18 May 2009 21:26:37 +0000 (-0700)
Subject: Fix SAMR server for winbindd access. Ensure we allow
X-Git-Tag: tdb-1.1.5~493
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ada1af41ea6a62ee89d43ffe5fa3ff415ea1129b;p=thirdparty%2Fsamba.git

Fix SAMR server for winbindd access. Ensure we allow
MAX_ACCESS to be mapped to what we're giving Everyone.
Jeremy.
---

diff --git a/source3/rpc_server/srv_samr_nt.c b/source3/rpc_server/srv_samr_nt.c
index dabdc964c5a..09b97b2b39d 100644
--- a/source3/rpc_server/srv_samr_nt.c
+++ b/source3/rpc_server/srv_samr_nt.c
@@ -243,8 +243,8 @@ static void map_max_allowed_access(const NT_USER_TOKEN *token,
 	}
 	*pacc_requested &= ~MAXIMUM_ALLOWED_ACCESS;
 
-	/* At least try for generic read. */
-	*pacc_requested = GENERIC_READ_ACCESS;
+	/* At least try for generic read|execute - Everyone gets that. */
+	*pacc_requested = GENERIC_READ_ACCESS|GENERIC_EXECUTE_ACCESS;
 
 	/* root gets anything. */
 	if (geteuid() == sec_initial_uid()) {