s3-winbind: don't try to do clever thing if the username is not found while authentic...
authorMatthieu Patou <mat@matws.net>
Mon, 30 Jan 2012 08:05:08 +0000 (00:05 -0800)
committerKarolin Seeger <kseeger@samba.org>
Fri, 3 Feb 2012 19:16:40 +0000 (20:16 +0100)
commita1ea9634fd07d1a949b9f772c36fcfb84c2f230f
tree95eb9950bf8a4299043a1a410a06869f84ed9281
parente86ad41af9d50265cab7cfdabdacb40bb4d3acc0
s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind

This could cause that we authenticate a user with a bogus domain to
winbind's domain if the password supplied for the PAM_AUTH match.

The problem was reported by Jeff Venable (jvenable@juniper.net).
Patch from Andrew Bartlett (abartlett@samba.org).

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
(cherry picked from commit 56d5cb938651b9c67a8400d1adc61a23889a6a29)

Fix bug #8734 (When using PAM_AUTH API from winbind if Kerberos auth is enabled,
samba will authenticate user with a bogus domain).
source3/winbindd/winbindd_pam.c