From aee83c22ff65a7afd302c7a164259ad050634c39 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 13 Oct 2014 09:42:25 +1300 Subject: ntlm_auth: Allow us to use kerberos when we are an AD DC Change-Id: I88caff9ded915d914cb7fda8829ccbcd3ad64af1 Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- source3/utils/ntlm_auth.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source3/utils/ntlm_auth.c b/source3/utils/ntlm_auth.c index f907742a26..6564eca422 100644 --- a/source3/utils/ntlm_auth.c +++ b/source3/utils/ntlm_auth.c @@ -1111,7 +1111,7 @@ static NTSTATUS ntlm_auth_start_ntlmssp_server(TALLOC_CTX *mem_ctx, cli_credentials_set_conf(server_credentials, lp_ctx); - if (lp_security() == SEC_ADS || USE_KERBEROS_KEYTAB) { + if (lp_server_role() == ROLE_ACTIVE_DIRECTORY_DC || lp_security() == SEC_ADS || USE_KERBEROS_KEYTAB) { cli_credentials_set_kerberos_state(server_credentials, CRED_AUTO_USE_KERBEROS); } else { cli_credentials_set_kerberos_state(server_credentials, CRED_DONT_USE_KERBEROS); -- cgit