[SCM] Samba Shared Repository - branch master updated - tevent-0-9-8-714-gbfd3a6f

[Stefan Metzmacher]

The branch, master has been updated
       via  bfd3a6f13aa935950142a24bf331feb98f987bde (commit)
      from  36e889f2cf5497717bdffede0c2f82e7fee79275 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit bfd3a6f13aa935950142a24bf331feb98f987bde
Author: Stefan Metzmacher <metze at sernet.de>
Date:   Thu Sep 24 21:35:38 2009 +0200

    s3:winbindd_cm: don't invalidate the whole connection when just samr gave ACCCESS_DENIED
    
    metze

-----------------------------------------------------------------------

Summary of changes:
 source3/winbindd/winbindd_cm.c |   13 ++++++++++++-
 1 files changed, 12 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source3/winbindd/winbindd_cm.c b/source3/winbindd/winbindd_cm.c
index 05df19f..9a78839 100644
--- a/source3/winbindd/winbindd_cm.c
+++ b/source3/winbindd/winbindd_cm.c
@@ -2165,7 +2165,18 @@ NTSTATUS cm_connect_sam(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx,
 
  done:
 
-	if (!NT_STATUS_IS_OK(result)) {
+	if (NT_STATUS_EQUAL(result, NT_STATUS_ACCESS_DENIED)) {
+		/*
+		 * if we got access denied, we might just have no access rights
+		 * to talk to the remote samr server server (e.g. when we are a
+		 * PDC and we are connecting a w2k8 pdc via an interdomain
+		 * trust). In that case do not invalidate the whole connection
+		 * stack
+		 */
+		TALLOC_FREE(conn->samr_pipe);
+		ZERO_STRUCT(conn->sam_domain_handle);
+		return result;
+	} else if (!NT_STATUS_IS_OK(result)) {
 		invalidate_cm_connection(conn);
 		return result;
 	}


-- 
Samba Shared Repository