sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Code

winbindd: allow wbinfo -a REALM\\user to work on a DC

Browse Source 
find_domain_from_name_noinit() find the correct domain based
on domain->alt_name, but the child for the local domain
fails to detect that winbindd_dual_auth_passdb() should be
used.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=2976
BUG: https://bugzilla.samba.org/show_bug.cgi?id=12709

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
This commit is contained in:
Stefan Metzmacher 2017-04-03 00:19:48 +02:00 committed by Andrew Bartlett
parent 5da664dbed
commit 948a1dab4d
1 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
source3/winbindd/winbindd_pam.c
View File

@ -1564,7 +1564,16 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(TALLOC_CTX *mem_ctx,
parse_domain_user(user, name_domain, name_user);
if (strequal(name_domain, get_global_sam_name())) {
/*
* We check against domain->name instead of
* name_domain, as find_auth_domain() ->
* find_domain_from_name_noinit() already decided
* that we are in a child for the correct domain.
*
* name_domain can also be lp_realm()
* we need to check against domain->name.
*/
if (strequal(domain->name, get_global_sam_name())) {
DATA_BLOB chal_blob = data_blob_const(chal, sizeof(chal));
/* do password magic */
@ -2004,7 +2013,16 @@ NTSTATUS winbind_dual_SamLogon(struct winbindd_domain *domain,
{
NTSTATUS result;
if (strequal(name_domain, get_global_sam_name())) {
/*
* We check against domain->name instead of
* name_domain, as find_auth_domain() ->
* find_domain_from_name_noinit() already decided
* that we are in a child for the correct domain.
*
* name_domain can also be lp_realm()
* we need to check against domain->name.
*/
if (strequal(domain->name, get_global_sam_name())) {
DATA_BLOB chal_blob = data_blob_const(
chal, 8);