[PATCH] Can't authenticate user from child-domain of trusted forest

[Volker Lendecke]

On Tue, Nov 28, 2017 at 01:10:12PM +0100, Ralph Böhme via samba-technical wrote:
> On Tue, Nov 28, 2017 at 01:02:13PM +0100, Volker Lendecke wrote:
> > On Tue, Nov 28, 2017 at 12:58:22PM +0100, Ralph Böhme wrote:
> > > auth still fails because add_trusted_domain() will only be called in the domain
> > > child, but not in the parent where we call find_domain_from_name_noinit().
> > 
> > Hmm. Ok. Right. We could do either of two things: Always request info3
> > from the child and pull the information in the parent before sending
> > it out, and secondly make it a message. Probably the first way is
> > cleaner, it creates less hidden, secret protocol elements.
> 
> I'm not sure the resulting struct winbind_domain is sufficiently initialized as
> it lacks the DNS name and trust flags. Ie after an attempt to auth user from
> previously unseed trusted domains wbinfo -m looks like this:

What do we need those flags for?

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de