r15229: Save useless roundtrips in pam_auth (fallback to samlogon) when we know

that the DC is not available.

Guenther
(This used to be commit 77407c021997db1b2a86ca26a5d125fa6b782949)

diff --git a/source3/nsswitch/winbindd_pam.c b/source3/nsswitch/winbindd_pam.c
index 6f077294934fb21fac02510130765e46fcd6de10..d35de4ce41397f6f3f2231928abd84ecbf3d2458 100644 (file)
--- a/source3/nsswitch/winbindd_pam.c
+++ b/source3/nsswitch/winbindd_pam.c
@@ -1105,7 +1105,9 @@ enum winbindd_result winbindd_dual_pam_auth(struct winbindd_domain *domain,
                        DEBUG(10,("winbindd_dual_pam_auth_kerberos failed: %s\n", nt_errstr(result)));
                }
 
-               if (NT_STATUS_EQUAL(result, NT_STATUS_NO_LOGON_SERVERS)) {
+               if (NT_STATUS_EQUAL(result, NT_STATUS_NO_LOGON_SERVERS) ||
+                   NT_STATUS_EQUAL(result, NT_STATUS_IO_TIMEOUT) ||
+                   NT_STATUS_EQUAL(result, NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND)) {
                        DEBUG(10,("winbindd_dual_pam_auth_kerberos setting domain to offline\n"));
                        domain->online = False;
                }