s3:winbindd: use a tcp connection for lsa in case lookup_names/lookup_sids doesn...

metze

diff --git a/source3/winbindd/winbindd_cm.c b/source3/winbindd/winbindd_cm.c
index 05df19fd0ca53c947392d84c59a56b2a176566a4..e83d5b01010b0c00ece5a1aa9b95cfe36ac3dcdf 100644 (file)
--- a/source3/winbindd/winbindd_cm.c
+++ b/source3/winbindd/winbindd_cm.c
@@ -2310,6 +2310,8 @@ NTSTATUS cm_connect_lsa(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx,
        DEBUG(10,("cm_connect_lsa: connected to LSA pipe for domain %s using "
                  "schannel.\n", domain->name ));
 
+       domain->can_do_ncacn_ip_tcp = domain->active_directory;
+
        result = rpccli_lsa_open_policy(conn->lsa_pipe, mem_ctx, True,
                                        SEC_FLAG_MAXIMUM_ALLOWED,
                                        &conn->lsa_policy);
@@ -2317,6 +2319,13 @@ NTSTATUS cm_connect_lsa(struct winbindd_domain *domain, TALLOC_CTX *mem_ctx,
                goto done;
        }
 
+       if (NT_STATUS_EQUAL(result, NT_STATUS_RPC_CANNOT_SUPPORT)) {
+               domain->can_do_ncacn_ip_tcp = true;
+               ZERO_STRUCT(conn->lsa_policy);
+               result = NT_STATUS_OK;
+               goto done;
+       }
+
        DEBUG(10,("cm_connect_lsa: rpccli_lsa_open_policy failed, trying "
                  "anonymous\n"));