summaryrefslogtreecommitdiff
path: root/source3/winbindd
diff options
context:
space:
mode:
authorMatthieu Patou <mat@matws.net>2012-01-30 00:05:08 -0800
committerMatthieu Patou <mat@samba.org>2012-01-30 18:58:12 +0100
commit56d5cb938651b9c67a8400d1adc61a23889a6a29 (patch)
tree619df465a76b8fc1af715c646385dc25e7b7945a /source3/winbindd
parent7350d994096efa62031f4f75cf92fb4ade2b2655 (diff)
downloadsamba-56d5cb938651b9c67a8400d1adc61a23889a6a29.tar.gz
samba-56d5cb938651b9c67a8400d1adc61a23889a6a29.tar.bz2
samba-56d5cb938651b9c67a8400d1adc61a23889a6a29.zip
s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind
This could cause that we authenticate a user with a bogus domain to winbind's domain if the password supplied for the PAM_AUTH match. The problem was reported by Jeff Venable (jvenable@juniper.net). Patch from Andrew Bartlett (abartlett@samba.org). Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
Diffstat (limited to 'source3/winbindd')
-rw-r--r--source3/winbindd/winbindd_pam.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 41f38a421d..93034adb84 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1079,7 +1079,8 @@ static NTSTATUS winbindd_dual_pam_auth_kerberos(struct winbindd_domain *domain,
DEBUG(3, ("Authentication for domain for [%s] -> [%s]\\[%s] failed as %s is not a trusted domain\n",
state->request->data.auth.user, name_domain, name_user, name_domain));
- contact_domain = find_our_domain();
+ result = NT_STATUS_NO_SUCH_USER;
+ goto done;
}
}