s3-winbind: don't try to do clever thing if the username is not found while authentic...
commit10a4287e9f645773e6ca09e192c68d1ee8636e82
authorMatthieu Patou <mat@matws.net>
Mon, 30 Jan 2012 08:05:08 +0000 (30 00:05 -0800)
committerKarolin Seeger <kseeger@samba.org>
Fri, 22 Jun 2012 19:36:48 +0000 (22 21:36 +0200)
treebc2a0550446e3d47af903016b8ccf2af2d2b34f0
parentc3fab3df51d41c837c29b213e108e43133256ce9
s3-winbind: don't try to do clever thing if the username is not found while authenticating through winbind

This could cause that we authenticate a user with a bogus domain to
winbind's domain if the password supplied for the PAM_AUTH match.

The problem was reported by Jeff Venable (jvenable@juniper.net).
Patch from Andrew Bartlett (abartlett@samba.org).

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
(cherry picked from commit 56d5cb938651b9c67a8400d1adc61a23889a6a29)

Fix bug #8734 (When using PAM_AUTH API from winbind if Kerberos auth is enabled,
samba will authenticate user with a bogus domain).
(cherry picked from commit a1ea9634fd07d1a949b9f772c36fcfb84c2f230f)
source3/winbindd/winbindd_pam.c