From 5fb852d0477a40393c980c5a26e6d2ae8d0c1e9f Mon Sep 17 00:00:00 2001 From: Tim Potter Date: Fri, 25 Jan 2002 05:17:49 +0000 Subject: Remove check for passwordserver = "*" as we now initialise it. Added TODO about perhaps doing a SAMLOGON udp/138 request before a cli_full_connection in connect_to_domain_password_server() (This used to be commit b61e40a5be3b8bacc74399902169755dbc4c7fca) --- source3/auth/auth_domain.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'source3/auth/auth_domain.c') diff --git a/source3/auth/auth_domain.c b/source3/auth/auth_domain.c index 2b5104bf92..e84d4e4724 100644 --- a/source3/auth/auth_domain.c +++ b/source3/auth/auth_domain.c @@ -78,6 +78,12 @@ static NTSTATUS connect_to_domain_password_server(struct cli_state **cli, return NT_STATUS_UNSUCCESSFUL; } + /* TODO: Send a SAMLOGON request to determine whether this is a valid + logonserver. We can avoid a 30-second timeout if the DC is down + if the SAMLOGON request fails as it is only over UDP. */ + + /* Attempt connection */ + result = cli_full_connection(cli, global_myname, server, &dest_ip, 0, "IPC$", "IPC", "", "", "", 0); @@ -444,7 +450,6 @@ static NTSTATUS check_ntdomain_security(const struct auth_context *auth_context, */ pserver = lp_passwordserver(); - if (! *pserver) pserver = "*"; p = pserver; nt_status = domain_client_validate(mem_ctx, user_info, domain, -- cgit