sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Code

winbindd: also apply schannel logic as an NT4 DC

Browse Source 
This applies the same logic we already added in
06601b3a92 for AD DCs wrt to IPC authentication
when running as an NT4 DC in cm_prepare_connection(). Similarily adjust the
check in cm_connect_lsa() added in 3e17a3b7cd and
in cm_connect_netlogon_transport() added by
532a14dc68 for cm_connect_netlogon_transport().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15533

Signed-off-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Ralph Boehme 2024-01-16 15:36:01 +01:00 committed by Stefan Metzmacher
parent 9b2920fd36
commit 95bb2acbf0
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
source3/winbindd/winbindd_cm.c
View File

@ -701,7 +701,7 @@ static NTSTATUS cm_prepare_connection(struct winbindd_domain *domain,
enum smb_signing_setting smb_sign_client_connections = lp_client_ipc_signing();
if (IS_AD_DC) {
if (IS_DC) {
if (domain->secure_channel_type == SEC_CHAN_NULL) {
/*
* Make sure we don't even try to
@ -809,7 +809,7 @@ static NTSTATUS cm_prepare_connection(struct winbindd_domain *domain,
try_ipc_auth = true;
}
if (IS_AD_DC) {
if (IS_DC) {
/*
* As AD DC we only use netlogon and lsa
* using schannel over an anonymous transport
@ -2924,7 +2924,7 @@ retry:
TALLOC_FREE(conn->lsa_pipe);
if (IS_AD_DC) {
if (IS_DC) {
/*
* Make sure we only use schannel as AD DC.
*/
@ -3050,7 +3050,7 @@ retry:
goto done;
}
if (IS_AD_DC) {
if (IS_DC) {
/*
* Make sure we only use schannel as AD DC.
*/
@ -3064,7 +3064,7 @@ retry:
anonymous:
if (IS_AD_DC) {
if (IS_DC) {
/*
* Make sure we only use schannel as AD DC.
*/
@ -3183,7 +3183,7 @@ static NTSTATUS cm_connect_netlogon_transport(struct winbindd_domain *domain,
*cli = NULL;
if (IS_AD_DC) {
if (IS_DC) {
if (domain->secure_channel_type == SEC_CHAN_NULL) {
/*
* Make sure we don't even try to