From: Ralph Boehme <slow@samba.org>
Date: Fri, 25 Jul 2025 14:51:31 +0000 (+0200)
Subject: libads: check for DCs in paused state in ads_try_connect()
X-Git-Tag: samba-4.21.8~18
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a0bf6a94267364c59c57a8c442ee0cf7860c3b73;p=thirdparty%2Fsamba.git

libads: check for DCs in paused state in ads_try_connect()

Similar to d3000d7df09de724694aa0682b9750b8c7767514 in master, 4.21 doesn't have
netlogon_pings().

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14981

Signed-off-by: Ralph Boehme <slow@samba.org>
---

diff --git a/source3/libads/ldap.c b/source3/libads/ldap.c
index da2f4d4acc2..b9de711b63d 100644
--- a/source3/libads/ldap.c
+++ b/source3/libads/ldap.c
@@ -280,6 +280,15 @@ static bool ads_fill_cldap_reply(ADS_STRUCT *ads,
 		goto out;
 	}
 
+	if (cldap_reply->command == LOGON_SAM_LOGON_PAUSE_RESPONSE ||
+	    cldap_reply->command == LOGON_SAM_LOGON_PAUSE_RESPONSE_EX)
+	{
+		DBG_NOTICE("DC %s in paused state\n", addr);
+		ret = false;
+		goto out;
+	}
+
+
 	/* Fill in the ads->config values */
 
 	ADS_TALLOC_CONST_FREE(ads->config.workgroup);