From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 7 Mar 2024 08:56:00 +0000 (+0100)
Subject: s3:libads: also avoid ADS_AUTH_GENERATE_KRB5_CONFIG for ADS_AUTH_ANON_BIND
X-Git-Tag: tdb-1.4.11~777
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=36748002f011c418ab061fb77c945f17fbe6be47;p=thirdparty%2Fsamba.git

s3:libads: also avoid ADS_AUTH_GENERATE_KRB5_CONFIG for ADS_AUTH_ANON_BIND

For anonymous binds we don't need a krb5.conf.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/source3/libads/ldap.c b/source3/libads/ldap.c
index a330b9dd7c9..13406b8b547 100644
--- a/source3/libads/ldap.c
+++ b/source3/libads/ldap.c
@@ -842,7 +842,7 @@ static ADS_STATUS ads_connect_internal(ADS_STRUCT *ads,
 		SMB_ASSERT(cli_credentials_is_anonymous(creds));
 	}
 
-	if (!(ads->auth.flags & ADS_AUTH_NO_BIND)) {
+	if (!(ads->auth.flags & (ADS_AUTH_NO_BIND|ADS_AUTH_ANON_BIND))) {
 		ads->auth.flags |= ADS_AUTH_GENERATE_KRB5_CONFIG;
 	}