s3-winbindd: Close netlogon connection if the status returned by the NetrSamLogonEx...

If not the child process would hang for quite a long time up to the
moment when the connection is cleaned by the kernel (took ~ 20 minutes)
in my tests.

Fix bug #8771 (Winbind takes up to 20 minutes to change from DC 1 to DC 2 and
in the meantime to respond NT_STATUS_IO_TIMEOUT).

diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 5c56b8731ab5838faf5bfe5a2d83bf50c11a19ad..26fdc5a409a9bfad3ce463036eae1356e1e0fe89 100644 (file)
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -2101,6 +2101,15 @@ enum winbindd_result winbindd_dual_pam_auth_crap(struct winbindd_domain *domain,
 
 done:
 
+       if (NT_STATUS_EQUAL(result, NT_STATUS_IO_TIMEOUT)) {
+               DEBUG(3,("winbindd_dual_pam_auth_crap: sam_network_logon(ex) "
+                               "returned NT_STATUS_IO_TIMEOUT after the retry."
+                               "We didn't know what's going on killing "
+                               "connections to domain %s\n",
+                               name_domain));
+               invalidate_cm_connection(&contact_domain->conn);
+       }
+
        /* give us a more useful (more correct?) error code */
        if ((NT_STATUS_EQUAL(result, NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) ||
            (NT_STATUS_EQUAL(result, NT_STATUS_UNSUCCESSFUL)))) {