Allow workstation trust accounts, too

Closes bug #123

diff --git a/src/modules/rlm_mschap/rlm_mschap.c b/src/modules/rlm_mschap/rlm_mschap.c
index 190388c62ba9b245b207fb24775ce8ed2ec0a506..be8908d9c8ad7e2e76317aafed73fe13ef0002f3 100644 (file)
--- a/src/modules/rlm_mschap/rlm_mschap.c
+++ b/src/modules/rlm_mschap/rlm_mschap.c
@@ -1273,8 +1273,8 @@ static int mschap_authenticate(void * instance, REQUEST *request)
                 *      return 'not found'.
                 */
                if (((smb_ctrl->vp_integer & ACB_DISABLED) != 0) ||
-                   ((smb_ctrl->vp_integer & ACB_NORMAL) == 0)) {
-                       RDEBUG2("SMB-Account-Ctrl says that the account is disabled, or is not a normal account.");
+                   ((smb_ctrl->vp_integer & (ACB_NORMAL|ACB_WSTRUST)) == 0)) {
+                       RDEBUG2("SMB-Account-Ctrl says that the account is disabled, or is not a normal or workstatin trust account.");
                        mschap_add_reply(request, &request->reply->vps,
                                          *response->vp_octets,
                                          "MS-CHAP-Error", "E=691 R=1", 9);