From: Joseph Sutton <josephsutton@catalyst.net.nz>
Date: Wed, 4 Oct 2023 03:23:12 +0000 (+1300)
Subject: s4:kdc: Pass AUTH_EXCLUDE_RESOURCE_GROUPS into samba_kdc_obtain_user_info_dc()
X-Git-Tag: tevent-0.16.0~121
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=300459e86a8c0b840c71d4771df670ee85defd7a;p=thirdparty%2Fsamba.git

s4:kdc: Pass AUTH_EXCLUDE_RESOURCE_GROUPS into samba_kdc_obtain_user_info_dc()

As the ‘group_inclusion’ parameter has an effect only if the
‘resource_groups_out’ parameter is non‐NULL, this does not result in a
change in behaviour.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 9a0d4ac33d3..40d4099633c 100644
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -2592,7 +2592,7 @@ krb5_error_code samba_kdc_update_pac(TALLOC_CTX *mem_ctx,
 			code = samba_kdc_obtain_user_info_dc(tmp_ctx,
 							     context,
 							     samdb,
-							     AUTH_INCLUDE_RESOURCE_GROUPS,
+							     AUTH_EXCLUDE_RESOURCE_GROUPS,
 							     delegated_proxy,
 							     &auth_user_info_dc,
 							     NULL);