From fd5ecef41ce3dd6acff1ed0fc17529fa8459a66f Mon Sep 17 00:00:00 2001 From: Günther Deschner Date: Wed, 22 Feb 2006 20:40:24 +0000 Subject: r13639: Never overwrite the acct_flags in rpccli_netlogon_sam_network_logon(). Guenther (This used to be commit c201e51de387d3d49880ed519eb9d825df92f5af) --- source3/nsswitch/winbindd_pam.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) (limited to 'source3/nsswitch') diff --git a/source3/nsswitch/winbindd_pam.c b/source3/nsswitch/winbindd_pam.c index 3f0b7f07aa..e6fb77f24f 100644 --- a/source3/nsswitch/winbindd_pam.c +++ b/source3/nsswitch/winbindd_pam.c @@ -743,17 +743,13 @@ NTSTATUS winbindd_dual_pam_auth_cached(struct winbindd_domain *domain, if (my_info3->acct_flags & ACB_DOMTRUST) { return NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT; } -#if 0 - /* The info3 acct_flags in NT4's samlogon reply don't have - * ACB_NORMAL set. Disable this paranoia check until we - * can research this more - Guenther */ - + if (!(my_info3->acct_flags & ACB_NORMAL)) { DEBUG(10,("winbindd_dual_pam_auth_cached: whats wrong with that one?: 0x%08x\n", my_info3->acct_flags)); return NT_STATUS_LOGON_FAILURE; } -#endif + kickoff_time = nt_time_to_unix(&my_info3->kickoff_time); if (kickoff_time != 0 && time(NULL) > kickoff_time) { return NT_STATUS_ACCOUNT_EXPIRED; -- cgit