diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2014-06-30 12:04:03 +1200 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2014-07-04 02:52:35 +0200 |
| commit | 0b77cd969c54e4efa6faff507834c183958ec23c (patch) | |
| tree | 7615b93b7e97793cdb6533f5ea311de40e989285 /source3/winbindd/winbindd_pam.c | |
| parent | 5d069a04fc843512b6a703691d81c4c1d28ef744 (diff) | |
| download | samba-0b77cd969c54e4efa6faff507834c183958ec23c.tar.gz samba-0b77cd969c54e4efa6faff507834c183958ec23c.tar.xz samba-0b77cd969c54e4efa6faff507834c183958ec23c.zip | |
s4-auth: Do not override the NT_STATUS_NOT_IMPLEMENTED error for winbindd
This changes the auth code in winbindd to use this as a flag, and to
therefore contact the RW DC.
Change-Id: If4164d27b57b453b398642fdf7d46d03cd0e65f2
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Nadezhda Ivanova <nivanova@samba.org>
Diffstat (limited to 'source3/winbindd/winbindd_pam.c')
| -rw-r--r-- | source3/winbindd/winbindd_pam.c | 16 |
1 files changed, 14 insertions, 2 deletions
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c index 1112b21cba..dd8f442d3d 100644 --- a/source3/winbindd/winbindd_pam.c +++ b/source3/winbindd/winbindd_pam.c @@ -1501,7 +1501,13 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(TALLOC_CTX *mem_ctx, result = winbindd_dual_auth_passdb( mem_ctx, 0, name_domain, name_user, &chal_blob, &lm_resp, &nt_resp, info3); - goto done; + + /* + * We need to try the remote NETLOGON server if this is NOT_IMPLEMENTED + */ + if (!NT_STATUS_EQUAL(result, NT_STATUS_NOT_IMPLEMENTED)) { + goto done; + } } /* check authentication loop */ @@ -1888,7 +1894,13 @@ NTSTATUS winbind_dual_SamLogon(struct winbindd_domain *domain, logon_parameters, name_domain, name_user, &chal_blob, &lm_response, &nt_response, info3); - goto process_result; + + /* + * We need to try the remote NETLOGON server if this is NOT_IMPLEMENTED + */ + if (!NT_STATUS_EQUAL(result, NT_STATUS_NOT_IMPLEMENTED)) { + goto process_result; + } } result = winbind_samlogon_retry_loop(domain, |