How to ignore trusted domains completely?
Dmitry Butskoy
buc at odusz.so-cdu.ru
Fri Nov 9 13:20:52 GMT 2007
Gerald (Jerry) Carter wrote:
>> I would like to ignore these domains for some reasons:
>>
>> - Their DCs are very far geographically, the network channels for them
>> is too low, or even not reachable at all (from our Samba hosts exactly).
>>
> ...
>
>> (I am aware of "winbind enum", and don't want to disable this...)
>>
>
> Understood. We still should ignore trusted domains if you tell
> us to. So enumeration is not the root cause.
>
> Looking at the code, it appears that disabling trusted domains
> regressed. Not sure when.
>
The attached patch solves this issue for me. ALl is just excellent if I
never call "rescan_trusted_domains()"...
I'm not sure whether it is a good design (it seems that "allow trusted
domains" was initially for DC only). But anyway, the way how to solve
the issue is clear.
Cheers,
Dmitry
-------------- next part --------------
A non-text attachment was scrubbed...
Name: samba3_winbindd_trusted_domains.patch
Type: text/x-patch
Size: 431 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20071109/84b0d8d4/samba3_winbindd_trusted_domains.bin
More information about the samba-technical
mailing list