[SCM] Samba Shared Repository - branch v3-5-test updated

Volker Lendecke vlendec at samba.org
Tue Nov 24 08:54:10 MST 2009


The branch, v3-5-test has been updated
       via  4c0bfcb... s3: Always try SamLogonEx
      from  698e8b4... docs: Fix Bug 6922: Add Registry patchfile for Win7 domain join.

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-5-test


- Log -----------------------------------------------------------------
commit 4c0bfcb1c8b5d276b7dcd305a2b4d197a8c94e1f
Author: Volker Lendecke <vl at samba.org>
Date:   Tue Nov 24 16:51:30 2009 +0100

    s3: Always try SamLogonEx
    
    Required for cluster systems working in a Samba domain. With NT4 this won't
    work, but real NT4 DCs should not be around in environments that pay big bucks
    for a cluster... And if they are, they can always install a Samba DC trusting
    that NT4 domain.

-----------------------------------------------------------------------

Summary of changes:
 source3/winbindd/winbindd_cm.c |    8 ++++++--
 1 files changed, 6 insertions(+), 2 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_cm.c b/source3/winbindd/winbindd_cm.c
index 95e1daf..e310d42 100644
--- a/source3/winbindd/winbindd_cm.c
+++ b/source3/winbindd/winbindd_cm.c
@@ -2471,9 +2471,13 @@ NTSTATUS cm_connect_netlogon(struct winbindd_domain *domain,
 	}
 
 	/*
-	 * Try NetSamLogonEx for AD domains
+	 * Always try netr_LogonSamLogonEx. We will fall back for NT4
+	 * which gives DCERPC_FAULT_OP_RNG_ERROR (function not
+	 * supported). We used to only try SamLogonEx for AD, but
+	 * Samba DCs can also do it. And because we don't distinguish
+	 * between Samba and NT4, always try it once.
 	 */
-	domain->can_do_samlogon_ex = domain->active_directory;
+	domain->can_do_samlogon_ex = true;
 
 	*cli = conn->netlogon_pipe;
 	return NT_STATUS_OK;


-- 
Samba Shared Repository


More information about the samba-cvs mailing list