From: Gerald Carter <jerry@samba.org>
Date: Wed, 27 Jul 2005 15:08:11 +0000 (+0000)
Subject: r8796: disable schannel on the lsa client pipe for now to deal with Windows 2003... 
X-Git-Tag: samba-misc-tags/initial-v3-0-unstable~4526
X-Git-Url: http://git.samba.org/samba.git/?a=commitdiff_plain;h=bc1443837c81bebbac7894075a15fe96338f8b0a;p=nivanova%2Fsamba-autobuild%2F.git

r8796: disable schannel on the lsa client pipe for now to deal with Windows 2003 sp1 and Windows 2000 SP4 SR1
---

diff --git a/source/nsswitch/winbindd_cm.c b/source/nsswitch/winbindd_cm.c
index 6400b23f9ff..d4022a84555 100644
--- a/source/nsswitch/winbindd_cm.c
+++ b/source/nsswitch/winbindd_cm.c
@@ -1038,6 +1038,12 @@ NTSTATUS cm_connect_lsa(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx,
 	conn = &domain->conn;
 
 	if (conn->lsa_pipe == NULL) {
+#if 0
+		/* disabling schannl on the LSA pipe for now since 
+		   both Win2K-SP4 SR1 & Win2K3-SP1 fail the open_policy() 
+		   call (return codes 0xc0020042 and 0xc0020041 respectively).
+		   We really need to fix this soon.  --jerry  */
+
 		unsigned char *session_key;
 
 		if (cm_get_schannel_key(domain, mem_ctx, &session_key))
@@ -1046,6 +1052,7 @@ NTSTATUS cm_connect_lsa(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx,
 							       session_key,
 							       domain->name);
 		else
+#endif
 			conn->lsa_pipe = cli_rpc_open_noauth(conn->cli,
 							     PI_LSARPC);