Avoiding set_dc_type_and_flags() for trusted domains
Gerald (Jerry) Carter
jerry at samba.org
Fri Mar 23 16:45:25 GMT 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gerald (Jerry) Carter wrote:
> Hey Guenther,
>
> What do yo think about this patch (just actually testing it now).
> It uses information from DsEnumerateDomainTrusts() to fill
> in the dc_type and trust flags so we don't have to actually
> contact the trusted DC.
>
> The reason I'm doing this is to support one way outgoing
> trusts between forests. In this case we can't actually
> contact the trusted DC as we have no credentials.
> I'm just experimenting right now. Thought you might be
> interested.
>
> btw...This can only be done when our primary domain is AD.
>
...
+ /* Use DsEnumerateDomainTrusts to get us the trust direction
+ and type */
+
+ result = cm_connect_netlogon(domain, &cli);
Obviously this should be sent to our_domain and not
the trusted one. I'll send an updated patch soon
after I finish testing more.
cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFGBAQlIR7qMdg1EfYRAjCmAKDfpfWwDRJb5i52FGCoBpxOvY+JHgCdHQIA
tJFXJRUQ1b20cJ7xq1HBBiQ=
=A/Rp
-----END PGP SIGNATURE-----
More information about the samba-technical
mailing list