From: Stefan Metzmacher <metze@samba.org>
Date: Fri, 21 Mar 2025 16:08:24 +0000 (+0100)
Subject: s3:auth: let auth_winbind pass WBC_AUTH_PARAM_FLAGS_FOR_NETLOGON if needed
X-Git-Tag: tevent-0.17.0~369
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=04968ead5ff790cc6a2e573b5fb545e135243b4e;p=thirdparty%2Fsamba.git

s3:auth: let auth_winbind pass WBC_AUTH_PARAM_FLAGS_FOR_NETLOGON if needed

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
---

diff --git a/source3/auth/auth_winbind.c b/source3/auth/auth_winbind.c
index ee0704f238b..b8a7dcb05a7 100644
--- a/source3/auth/auth_winbind.c
+++ b/source3/auth/auth_winbind.c
@@ -96,6 +96,10 @@ static NTSTATUS check_winbind_security(const struct auth_context *auth_context,
 			user_info->password.response.lanman.data;
 	}
 
+	if (auth_context->for_netlogon) {
+		params.flags |= WBC_AUTH_PARAM_FLAGS_FOR_NETLOGON;
+	}
+
 	/* we are contacting the privileged pipe */
 	become_root();
 	wbc_status = wbcAuthenticateUserEx(&params, &info, &err);