sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00
Code

winbind: check for allowed domains in winbindd_dual_pam_chauthtok()

Browse Source 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14602

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
This commit is contained in:
Ralph Boehme 2021-01-11 17:59:48 +01:00 committed by Jeremy Allison
parent 4bc17600bc
commit 88e92faace
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
source3/winbindd/winbindd_pam.c
View File

@ -2845,6 +2845,14 @@ enum winbindd_result winbindd_dual_pam_chauthtok(struct winbindd_domain *contact
goto done;
}
if (!is_allowed_domain(domain)) {
DBG_NOTICE("Authentication failed for user [%s] "
"from firewalled domain [%s]\n",
user, domain);
result = NT_STATUS_AUTHENTICATION_FIREWALL_FAILED;
goto done;
}
/* Change password */
oldpass = state->request->data.chauthtok.oldpass;