s3: Fix kerberos refresh chain.

Signed-off-by: Bo Yang <boyang@samba.org>

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index fe6485522e083f8ac1b32cb381b8c1f8a47105fe..43f81f79ae3bbe29bb61e2d50ff6f70958f06aaa 100644 (file)
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -986,7 +986,9 @@ static NTSTATUS winbindd_dual_pam_auth_cached(struct winbindd_domain *domain,
 #ifdef HAVE_KRB5
                if ((state->request->flags & WBFLAG_PAM_KRB5) &&
                    ((tdc_domain = wcache_tdc_fetch_domain(state->mem_ctx, name_domain)) != NULL) &&
-                   (tdc_domain->trust_type & NETR_TRUST_TYPE_UPLEVEL)) {
+                   ((tdc_domain->trust_type & NETR_TRUST_TYPE_UPLEVEL) ||
+                   /* used to cope with the case winbindd starting without network. */
+                   !strequal(tdc_domain->domain_name, tdc_domain->dns_name))) {
 
                        uid_t uid = -1;
                        const char *cc = NULL;