From 406cd32126d223d79bdb4328f5404889b4f11d52 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 24 Oct 2014 10:32:20 +1300 Subject: [PATCH] s4-winbind: Correctly reject the unsupported WBFLAG_PAM_AUTH_PAC flag Signed-off-by: Andrew Bartlett Reviewed-by: Stefan Metzmacher --- source4/winbind/wb_samba3_cmd.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/source4/winbind/wb_samba3_cmd.c b/source4/winbind/wb_samba3_cmd.c index 9ec3c4b0ccd..4c4033df574 100644 --- a/source4/winbind/wb_samba3_cmd.c +++ b/source4/winbind/wb_samba3_cmd.c @@ -640,6 +640,10 @@ NTSTATUS wbsrv_samba3_pam_auth_crap(struct wbsrv_samba3_call *s3call) DATA_BLOB chal, nt_resp, lm_resp; DEBUG(5, ("wbsrv_samba3_pam_auth_crap called\n")); + if (s3call->request->flags & WBFLAG_PAM_AUTH_PAC) { + DEBUG(3, ("PAC validation not supported in this winbind implementation\n")); + return NT_STATUS_INVALID_PARAMETER; + } chal.data = s3call->request->data.auth_crap.chal; chal.length = sizeof(s3call->request->data.auth_crap.chal); -- 2.11.4.GIT