Bug 98 - nmbd/nmbd_processlogon.c SAMLOGON incorrect for ADS domains
Summary: nmbd/nmbd_processlogon.c SAMLOGON incorrect for ADS domains
Status: CLOSED FIXED
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.0.0preX
Hardware: Other other
: P2 minor
Target Milestone: none
Assignee: Jim McDonough
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-05-19 11:17 UTC by Anthony Liguori
Modified: 2005-08-24 10:19 UTC (History)
0 users

See Also:

Attachments
Add DNS decompression support to ADS nmbd SAMLOGON (3.22 KB, patch)
2003-05-19 11:18 UTC, Anthony Liguori 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Anthony Liguori 2003-05-19 11:17:41 UTC 
Samba currently can handle ADS style-domain logons in a very restricted mode
(kerberos and just about everything interesting is disabled).  It works by using
a NETBIOS name instead of a DNS name.  The AD-client will then fall back to
doing the netlogon ADS query over NETBIOS instead of MS-CLDAP.

The nmbd code does not properly handle this case though.  The response should be
DNS compressed which explains why we were previously generating incorrect packets.
Comment 1 Anthony Liguori 2003-05-19 11:18:47 UTC 
Created attachment 11 [details]
Add DNS decompression support to ADS nmbd SAMLOGON

This patch add DNS compression support to nmbd for fallback ADS domain joins.
Comment 2 Jim McDonough 2003-05-20 06:54:32 UTC 
Checked in your fix
Comment 3 Gerald (Jerry) Carter (dead mail address) 2005-02-07 07:57:14 UTC 
originally reported against 3.0aph24.  Bugzilla spring cleaning.  
Removing old alpha versions.
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-08-24 10:19:42 UTC 
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.