How to ignore trusted domains completely?

Dmitry Butskoy buc at odusz.so-cdu.ru
Fri Nov 9 13:20:52 GMT 2007


Gerald (Jerry) Carter wrote:
>> I would like to ignore these domains for some reasons:
>>
>> - Their DCs are very far geographically, the network channels for them
>> is too low, or even not reachable at all (from our Samba hosts exactly).
>>     
> ...
>   
>> (I am aware of "winbind enum", and don't want to disable this...)
>>     
>
> Understood.  We still should ignore trusted domains if you tell
> us to.  So enumeration is not the root cause.
>
> Looking at the code, it appears that disabling trusted domains
> regressed.  Not sure when.
>   

The attached patch solves this issue for me. ALl is just excellent if I 
never call "rescan_trusted_domains()"...

I'm not sure whether it is a good design (it seems that "allow trusted 
domains" was initially for DC only). But anyway, the way how to solve 
the issue is clear.


Cheers,
Dmitry

-------------- next part --------------
A non-text attachment was scrubbed...
Name: samba3_winbindd_trusted_domains.patch
Type: text/x-patch
Size: 431 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20071109/84b0d8d4/samba3_winbindd_trusted_domains.bin


More information about the samba-technical mailing list