r4732: Even if we have 'password server' set, we need to look up the native DC name

via netbios, as the user might have set an IP address or a fqdn.

Volker

diff --git a/source/nsswitch/winbindd_cm.c b/source/nsswitch/winbindd_cm.c
index 8a11dfbc30ac4061253c1e838886aa45ed3471b6..3b7459ab1d96212becea9e07bd5594e9ea89837a 100644 (file)
--- a/source/nsswitch/winbindd_cm.c
+++ b/source/nsswitch/winbindd_cm.c
@@ -557,6 +557,12 @@ static BOOL get_dcs(TALLOC_CTX *mem_ctx, const struct winbindd_domain *domain,
                if (!resolve_name(dcname, &ip, 0x20))
                        continue;
 
+               /* Even if we got the dcname, double check the name to use for
+                * the netlogon auth2 */
+
+               if (!name_status_find(domain->name, 0x1c, 0x20, ip, dcname))
+                       continue;
+
                add_one_dc_unique(mem_ctx, domain->name, dcname, ip,
                                  dcs, num_dcs);
        }