Metze claims that without this his win2k server gets horribly confused looking

for all sorts of AD things in lp_realm().  We need to get some non-Win2k
NTLMSSP and chase this up a bit, but this will do for now.

(Hmm, this might affect NTLMv2 as well)

Andrew Bartlett
(This used to be commit 0e6babc306f60e88fc28705a8d4ad112bafe92cb)

diff --git a/source3/smbd/sesssetup.c b/source3/smbd/sesssetup.c
index 785f8d6821141307eb88c482e0f143939485d1c3..b9af7200089aba2c103afc15e505b769be9bb696 100644 (file)
--- a/source3/smbd/sesssetup.c
+++ b/source3/smbd/sesssetup.c
@@ -322,12 +322,12 @@ static int reply_spnego_negotiate(connection_struct *conn,
                          "U",
                          lp_workgroup());
 
-               fstrcpy(dnsdomname, lp_realm());
+               fstrcpy(dnsdomname, (SEC_ADS == lp_security())?lp_realm():"");
                strlower(dnsdomname);
 
                fstrcpy(dnsname, global_myname);
                fstrcat(dnsname, ".");
-               fstrcat(dnsname, lp_realm());
+               fstrcat(dnsname, dnsdomname);
                strlower(dnsname);
 
                msrpc_gen(&struct_blob, "aaaaa",