winbindd: don't set mapped_state in winbindd_dual_auth_passdb()
commit8dfdbe095a4c8a7bedd29341656a7c3164517713
authorStefan Metzmacher <metze@samba.org>
Thu, 3 Mar 2022 22:23:21 +0000 (3 23:23 +0100)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 10 Mar 2022 03:16:35 +0000 (10 03:16 +0000)
tree2804692e8b5c51295722a3e6c07207d0a6f19ecd
parente1d2c59d360fb4e72dafe788b5d9dbb0572bf811
winbindd: don't set mapped_state in winbindd_dual_auth_passdb()

mapped_state is a special hack for authenticate_ldap_simple_bind_send()
in order to avoid some additional work in authsam_check_password_internals()

This doesn't apply here. We should also handle wbinfo -a
authentication UPN names, e.g. administrator@DOMAIN,
even if the account belongs to the local sam.

With this change the behavior is consistent also locally on DCs and
also an RODC can handle these requests locally for cached accounts.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13879
BUG: https://bugzilla.samba.org/show_bug.cgi?id=15003

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
selftest/knownfail.d/samba.blackbox.wbinfo [deleted file]
source3/winbindd/winbindd_pam.c