Should the failure of log_nt_token in source3/auth/auth_util.c:create_local_token cause authentication to fail?

[Andrew Bartlett]

On Thu, 2013-08-15 at 12:53 -0700, Richard Sharpe wrote:
> Hi folks,
> 
> If this script is failing or does not exist (if you have the log nt
> token command parameter defined in the smb.conf) all auth seems to
> fail.
> 
> Should this really happen?

That sounds like a really good way to have token-based access control
for highly unusual situations, or at least to notice if the command
fails.  It shouldn't be too hard to write a script that always
'succeeds' if you really want that. 

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Catalyst IT                   http://catalyst.net.nz