Bug 98 - nmbd/nmbd_processlogon.c SAMLOGON incorrect for ADS domains
Summary: nmbd/nmbd_processlogon.c SAMLOGON incorrect for ADS domains
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.0.0preX
Hardware: Other other
: P2 minor
Target Milestone: none
Assignee: Jim McDonough
QA Contact:
Depends on:
Reported: 2003-05-19 11:17 UTC by Anthony Liguori
Modified: 2005-08-24 10:19 UTC (History)
0 users

See Also:

Add DNS decompression support to ADS nmbd SAMLOGON (3.22 KB, patch)
2003-05-19 11:18 UTC, Anthony Liguori
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Anthony Liguori 2003-05-19 11:17:41 UTC
Samba currently can handle ADS style-domain logons in a very restricted mode
(kerberos and just about everything interesting is disabled).  It works by using
a NETBIOS name instead of a DNS name.  The AD-client will then fall back to
doing the netlogon ADS query over NETBIOS instead of MS-CLDAP.

The nmbd code does not properly handle this case though.  The response should be
DNS compressed which explains why we were previously generating incorrect packets.
Comment 1 Anthony Liguori 2003-05-19 11:18:47 UTC
Created attachment 11 [details]
Add DNS decompression support to ADS nmbd SAMLOGON

This patch add DNS compression support to nmbd for fallback ADS domain joins.
Comment 2 Jim McDonough 2003-05-20 06:54:32 UTC
Checked in your fix
Comment 3 Gerald (Jerry) Carter (dead mail address) 2005-02-07 07:57:14 UTC
originally reported against 3.0aph24.  Bugzilla spring cleaning.  
Removing old alpha versions.
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:19:42 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.