Sumit Bose 3bbe690c50 Use work around for 'winbind use default domain' only if it is set ...

Currently in smb_getpwnam() the NetBIOS domain name and the winbind separator
character is always added to the user name returned by Get_Pwnam_alloc() if it
does not contain the winbind separator character. As comments in the code
indicates this is done as a work around if 'winbind use default domain' is set
to yes in the samba configuration.

This make sense if the option is set because otherwise the domain information is
lost from the user name. But it causes errors if other services than winbind are
used for user lookup, e.g. sssd. sssd can handle different kind of fully
qualified user names as input, e.g. user@domain.name or DOM\user, but returns a
canonical name, by default user@domain.name.

While it would be possible to get around this issue with a special configuration
either on the sssd or samba side I think the cleaner solution is to use the work
around only if 'winbind use default domain' is set to yes which is what this
patch does.

Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Nov 12 15:54:15 CET 2012 on sn-devel-104

2012-11-12 15:54:15 +01:00

..

auth_builtin.c

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

auth_domain.c

s3-auth Remove unused global_machine_account_needs_changing

2012-07-13 07:52:40 +02:00

auth_generic.c

lib/param: Move all enum declarations to lib/param

2012-07-24 11:01:17 +02:00

auth_ntlmssp.c

auth: Remove .get_challenge (only used for security=server)

2012-07-03 08:13:01 +10:00

auth_sam.c

s3-talloc Change TALLOC_ZERO_P() to talloc_zero()

2011-06-09 12:40:08 +02:00

auth_samba4.c

s3: Fix a typo

2012-10-19 21:29:13 +02:00

auth_script.c

More strlcat/strlcpy truncate checks.

2012-03-30 21:26:07 +02:00

auth_unix.c

s3-auth: Fix account check over ncalrpc.

2011-07-13 14:09:35 +02:00

auth_util.c

Use work around for 'winbind use default domain' only if it is set

2012-11-12 15:54:15 +01:00

auth_wbc.c

s3-talloc Change TALLOC_ZERO_P() to talloc_zero()

2011-06-09 12:40:08 +02:00

auth_winbind.c

s3-talloc Change TALLOC_ZERO_P() to talloc_zero()

2011-06-09 12:40:08 +02:00

auth.c

auth: Remove .get_challenge (only used for security=server)

2012-07-03 08:13:01 +10:00

check_samsec.c

s3-talloc Change TALLOC_ZERO_P() to talloc_zero()

2011-06-09 12:40:08 +02:00

pampass.c

s3:auth: use const in smb_pam_xxx_session()

2012-10-19 12:14:58 +02:00

pass_check.c

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

proto.h

s3:auth: use const in smb_pam_xxx_session()

2012-10-19 12:14:58 +02:00

server_info_sam.c

s3-auth remove sanitized_username from auth_serversupplied_info

2011-08-03 18:48:04 +10:00

server_info.c

s3:auth/server_info: the primary rid should be in the groups rid array (bug #8798)

2012-05-09 19:36:01 +02:00

token_util.c

s3:auth fix a compiler warning

2012-09-16 11:50:11 -07:00

user_info.c

s3-auth: Pass the remote_address down to user_info.

2011-07-04 18:28:02 +10:00

user_krb5.c

lib/param: Move all enum declarations to lib/param

2012-07-24 11:01:17 +02:00

user_util.c

Correctly check for errors in strlower_m() returns.

2012-08-09 12:08:18 -07:00

wscript_build

BUG #9295: Build standard auth modules as internal modules.

2012-10-18 11:33:17 +02:00