s4:kdc: Pass AUTH_EXCLUDE_RESOURCE_GROUPS into samba_kdc_obtain_user_info_dc()

As the ‘group_inclusion’ parameter has an effect only if the
‘resource_groups_out’ parameter is non‐NULL, this does not result in a
change in behaviour.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 9a0d4ac33d35675a3e7cbe448adc6c48a0ecf012..40d4099633c0878b4d6234b65e5bd9cb7a386a89 100644 (file)
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -2592,7 +2592,7 @@ krb5_error_code samba_kdc_update_pac(TALLOC_CTX *mem_ctx,
                        code = samba_kdc_obtain_user_info_dc(tmp_ctx,
                                                             context,
                                                             samdb,
-                                                            AUTH_INCLUDE_RESOURCE_GROUPS,
+                                                            AUTH_EXCLUDE_RESOURCE_GROUPS,
                                                             delegated_proxy,
                                                             &auth_user_info_dc,
                                                             NULL);