From: Alan T. DeKok <aland@freeradius.org>
Date: Thu, 9 Dec 2010 10:13:36 +0000 (+0100)
Subject: Allow workstation trust accounts, too
X-Git-Tag: release_2_1_11~190
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b76b34eaf8e5fd79dbcc49110c19b5503bfe5109;p=thirdparty%2Ffreeradius-server.git

Allow workstation trust accounts, too

Closes bug #123
---

diff --git a/src/modules/rlm_mschap/rlm_mschap.c b/src/modules/rlm_mschap/rlm_mschap.c
index 190388c62ba..be8908d9c8a 100644
--- a/src/modules/rlm_mschap/rlm_mschap.c
+++ b/src/modules/rlm_mschap/rlm_mschap.c
@@ -1273,8 +1273,8 @@ static int mschap_authenticate(void * instance, REQUEST *request)
 		 *	return 'not found'.
 		 */
 		if (((smb_ctrl->vp_integer & ACB_DISABLED) != 0) ||
-		    ((smb_ctrl->vp_integer & ACB_NORMAL) == 0)) {
-			RDEBUG2("SMB-Account-Ctrl says that the account is disabled, or is not a normal account.");
+		    ((smb_ctrl->vp_integer & (ACB_NORMAL|ACB_WSTRUST)) == 0)) {
+			RDEBUG2("SMB-Account-Ctrl says that the account is disabled, or is not a normal or workstatin trust account.");
 			mschap_add_reply(request, &request->reply->vps,
 					  *response->vp_octets,
 					  "MS-CHAP-Error", "E=691 R=1", 9);