mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
s3:winbindd_cm: improve detection for the anonymous fallback.
If the kinit results in NT_STATUS_NO_LOGON_SERVERS, we should fallback, if allowed. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org>
This commit is contained in:
parent
7391416399
commit
f126eeb2a1
@ -1162,6 +1162,7 @@ static NTSTATUS cm_prepare_connection(struct winbindd_domain *domain,
|
||||
if (NT_STATUS_EQUAL(result, NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_TRUSTED_DOMAIN_FAILURE)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_INVALID_ACCOUNT_NAME)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_NO_LOGON_SERVERS)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_LOGON_FAILURE))
|
||||
{
|
||||
if (cli_credentials_is_anonymous(creds)) {
|
||||
@ -1225,6 +1226,8 @@ static NTSTATUS cm_prepare_connection(struct winbindd_domain *domain,
|
||||
*/
|
||||
if (NT_STATUS_EQUAL(result, NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_TRUSTED_DOMAIN_FAILURE)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_INVALID_ACCOUNT_NAME)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_NO_LOGON_SERVERS)
|
||||
|| NT_STATUS_EQUAL(result, NT_STATUS_LOGON_FAILURE))
|
||||
{
|
||||
goto anon_fallback;
|
||||
|
Loading…
Reference in New Issue
Block a user