From 9e7e429c98f20967211437889fa6f2d7883b7d93 Mon Sep 17 00:00:00 2001 From: Günther Deschner Date: Fri, 17 Mar 2006 10:36:07 +0000 Subject: r14507: Re-disable accidentially re-enabled paranoia check. This should make offline logons work again with NT4 and older Samba3 DCs. Guenther (This used to be commit 0892077fcec913ef76b017b5bfe058d20a322915) --- source3/nsswitch/winbindd_pam.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/source3/nsswitch/winbindd_pam.c b/source3/nsswitch/winbindd_pam.c index 12455db8f6..e2b4297564 100644 --- a/source3/nsswitch/winbindd_pam.c +++ b/source3/nsswitch/winbindd_pam.c @@ -746,12 +746,15 @@ NTSTATUS winbindd_dual_pam_auth_cached(struct winbindd_domain *domain, return NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT; } + /* The info3 acct_flags in NT4's samlogon reply don't have + * ACB_NORMAL set. */ +#if 0 if (!(my_info3->acct_flags & ACB_NORMAL)) { DEBUG(10,("winbindd_dual_pam_auth_cached: whats wrong with that one?: 0x%08x\n", my_info3->acct_flags)); return NT_STATUS_LOGON_FAILURE; } - +#endif kickoff_time = nt_time_to_unix(&my_info3->kickoff_time); if (kickoff_time != 0 && time(NULL) > kickoff_time) { return NT_STATUS_ACCOUNT_EXPIRED; -- cgit