[PATCH] Two-way trust demonstrated between AD parent and Samba subdomain!

Andrew Bartlett abartlet at samba.org
Sun Aug 24 17:06:38 MDT 2014


On Sat, 2014-08-23 at 11:13 +0200, Stefan (metze) Metzmacher wrote:
> Am 22.08.2014 um 12:06 schrieb Andrew Bartlett:
> > In my subdomain-wip branch, Garming and I tonight demonstrated NTLM
> > authentication working in both directions.
> > 
> > Kerberos has worked like this for ages, but now NTLM is working we are
> > much closer to the basic level of subdomain (and presumably inter-forest
> > trusted domain) operation that folks have been looking for.
> 
> That sounds really good! Thanks!
> 
> > The attached 3 patches helped, and I would like reviewed.  I'm
> > continuing to work on cleaning up the remainder of the subdomain-wip
> > branch.
> > 
> > https://git.samba.org/abartlet/samba.git/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/subdomain-wip
> 
> I've added the 3 patches with some comments to my
> https://git.samba.org/?p=metze/samba/wip.git;a=shortlog;h=refs/heads/master4-abartlet4
> branch. The other patches in that branch just require some sign-off (or
> renewed sign-off)
> by you and Garming.

Thanks!  I've signed off as appropriate and pushed those that you marked
reviewed.  (I've left the pdb_ldap change out for now, I don't have a
test rig for that).

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba



-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20140825/f4fb108e/attachment.pgp>


More information about the samba-technical mailing list