[SCM] Samba Shared Repository - branch master updated

Volker Lendecke Volker.Lendecke at SerNet.DE
Thu Jul 29 14:14:06 MDT 2010


On Thu, Jul 29, 2010 at 02:53:34PM -0500, Jeremy Allison wrote:
>     Fix bug #7589 - ntlm_auth fails to use cached credentials.
>     
>     In handling the WINBINDD_PAM_AUTH message winbindd canonicalizes a *copy*
>     of the mapped username, but fails to canonicalize the actual username
>     sent to the backend domain process. When "winbind default domain"
>     is set this can lead to credentials being cached with an index of
>     user: user, not DOMAIN\user. All other code paths that use
>     canonicalize_username() (WINBINDD_PAM_CHAUTHTOK, WINBINDD_PAM_LOGOFF)
>     correctly canonicalize the data sent to the backend. All calls
>     the can cause credentials to be looked up (PAM_CHAUTHTOK etc.)
>     correctly call canonicalize_username() to create the credential
>     lookup key.

That was mine, right? Thanks for fixing! :-)

Volker


More information about the samba-technical mailing list