Avoiding set_dc_type_and_flags() for trusted domains

Gerald (Jerry) Carter jerry at samba.org
Fri Mar 23 16:45:25 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
> Hey Guenther,
> 
> What do yo think about this patch (just actually testing it now).
> It uses information from DsEnumerateDomainTrusts() to fill
> in the dc_type and trust flags so we don't have to actually
> contact the trusted DC.
> 
> The reason I'm doing this is to support one way outgoing
> trusts between forests.  In this case we can't actually
> contact the trusted DC as we have no credentials.
> I'm just experimenting right now.  Thought you might be
> interested.
> 
> btw...This can only be done when our primary domain is AD.
> 
...
+	/* Use DsEnumerateDomainTrusts to get us the trust direction
+	   and type */
+
+	result = cm_connect_netlogon(domain, &cli);

Obviously this should be sent to our_domain and not
the trusted one.  I'll send an updated patch soon
after I finish testing more.




cheers, jerry


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGBAQlIR7qMdg1EfYRAjCmAKDfpfWwDRJb5i52FGCoBpxOvY+JHgCdHQIA
tJFXJRUQ1b20cJ7xq1HBBiQ=
=A/Rp
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list