]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
s3:libads: also avoid ADS_AUTH_GENERATE_KRB5_CONFIG for ADS_AUTH_ANON_BIND
authorStefan Metzmacher <metze@samba.org>
Thu, 7 Mar 2024 08:56:00 +0000 (09:56 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 14 May 2024 10:18:31 +0000 (10:18 +0000)
For anonymous binds we don't need a krb5.conf.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
source3/libads/ldap.c

index a330b9dd7c9cc3a2c01ed7c9fc03a5781108bc96..13406b8b54723237b21d7a946e47bc3e3d1a4d47 100644 (file)
@@ -842,7 +842,7 @@ static ADS_STATUS ads_connect_internal(ADS_STRUCT *ads,
                SMB_ASSERT(cli_credentials_is_anonymous(creds));
        }
 
-       if (!(ads->auth.flags & ADS_AUTH_NO_BIND)) {
+       if (!(ads->auth.flags & (ADS_AUTH_NO_BIND|ADS_AUTH_ANON_BIND))) {
                ads->auth.flags |= ADS_AUTH_GENERATE_KRB5_CONFIG;
        }