Do not create a new mapping if a domain with an explicit config fails

diff --git a/source/winbindd/idmap_util.c b/source/winbindd/idmap_util.c
index 04d12944e2570866c329cb54d05e78a24396fde0..2a6beca5a2a9b3f0b5b68d6947ec208a46dc0812 100644 (file)
--- a/source/winbindd/idmap_util.c
+++ b/source/winbindd/idmap_util.c
@@ -174,6 +174,15 @@ backend:
                goto done;
        }
 
+       if (dom_name[0] != '\0') {
+               /*
+                * We had the task to go to a specific domain which
+                * could not answer our request. Fail.
+                */
+               idmap_cache_set_sid2uid(sid, -1);
+               return NT_STATUS_NONE_MAPPED;
+       }
+
        ret = idmap_new_mapping(sid, ID_TYPE_UID, &map.xid);
 
        if (!NT_STATUS_IS_OK(ret)) {
@@ -236,6 +245,15 @@ backend:
                goto done;
        }
 
+       if (domname[0] != '\0') {
+               /*
+                * We had the task to go to a specific domain which
+                * could not answer our request. Fail.
+                */
+               idmap_cache_set_sid2uid(sid, -1);
+               return NT_STATUS_NONE_MAPPED;
+       }
+
        ret = idmap_new_mapping(sid, ID_TYPE_GID, &map.xid);
 
        if (!NT_STATUS_IS_OK(ret)) {