From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 2 Jun 2016 16:13:40 +0000 (+0200)
Subject: s3:winbindd: pass 'interactive' down through winbindd_dual_auth_passdb()
X-Git-Tag: tdb-1.3.10~628
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f9989f21422e3ec5877003a15eaa5515994dab99;p=thirdparty%2Fsamba.git

s3:winbindd: pass 'interactive' down through winbindd_dual_auth_passdb()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=11441

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 89104235555..2cfd88ae6db 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1233,6 +1233,7 @@ static NTSTATUS winbindd_dual_auth_passdb(TALLOC_CTX *mem_ctx,
 					  const DATA_BLOB *challenge,
 					  const DATA_BLOB *lm_resp,
 					  const DATA_BLOB *nt_resp,
+					  bool interactive,
 					  struct netr_SamInfo3 **pinfo3)
 {
 	struct auth_context *auth_context;
@@ -1270,6 +1271,10 @@ static NTSTATUS winbindd_dual_auth_passdb(TALLOC_CTX *mem_ctx,
 	/* We don't want to come back to winbindd or to do PAM account checks */
 	user_info->flags |= USER_INFO_LOCAL_SAM_ONLY | USER_INFO_INFO3_AND_NO_AUTHZ;
 
+	if (interactive) {
+		user_info->flags |= USER_INFO_INTERACTIVE_LOGON;
+	}
+
 	status = make_auth_context_fixed(frame, &auth_context, challenge->data);
 
 	if (!NT_STATUS_IS_OK(status)) {
@@ -1541,7 +1546,9 @@ static NTSTATUS winbindd_dual_pam_auth_samlogon(TALLOC_CTX *mem_ctx,
 
 		result = winbindd_dual_auth_passdb(
 			mem_ctx, 0, name_domain, name_user,
-			&chal_blob, &lm_resp, &nt_resp, info3);
+			&chal_blob, &lm_resp, &nt_resp,
+			true, /* interactive */
+			info3);
 
 		/* 
 		 * We need to try the remote NETLOGON server if this is NOT_IMPLEMENTED 
@@ -1955,7 +1962,9 @@ NTSTATUS winbind_dual_SamLogon(struct winbindd_domain *domain,
 			mem_ctx,
 			logon_parameters,
 			name_domain, name_user,
-			&chal_blob, &lm_response, &nt_response, info3);
+			&chal_blob, &lm_response, &nt_response,
+			false, /* interactive */
+			info3);
 
 		/* 
 		 * We need to try the remote NETLOGON server if this is NOT_IMPLEMENTED