From: Pavel Filipenský Date: Mon, 4 Aug 2025 21:26:02 +0000 (+0200) Subject: s3:netlogon: IPA DC is the PDC as well - allow ROLE_IPA_DC in _netr_DsRGetForestTrust... X-Git-Tag: tdb-1.4.14~35 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1dbafcc4e4ff8f39af5ca737b30e9821413dd1f2;p=thirdparty%2Fsamba.git s3:netlogon: IPA DC is the PDC as well - allow ROLE_IPA_DC in _netr_DsRGetForestTrustInformation() BUG: https://bugzilla.samba.org/show_bug.cgi?id=15891 Signed-off-by: Pavel Filipenský Reviewed-by: Alexander Bokovoy Reviewed-by: Andreas Schneider --- diff --git a/source3/rpc_server/netlogon/srv_netlog_nt.c b/source3/rpc_server/netlogon/srv_netlog_nt.c index 39bf2b30841..eb60aa7c7d7 100644 --- a/source3/rpc_server/netlogon/srv_netlog_nt.c +++ b/source3/rpc_server/netlogon/srv_netlog_nt.c @@ -2907,7 +2907,10 @@ WERROR _netr_DsRGetForestTrustInformation(struct pipes_struct *p, return WERR_INVALID_FLAGS; } - if ((r->in.flags & DS_GFTI_UPDATE_TDO) && (lp_server_role() != ROLE_DOMAIN_PDC)) { + if ((r->in.flags & DS_GFTI_UPDATE_TDO) && + (lp_server_role() != ROLE_DOMAIN_PDC) && + (lp_server_role() != ROLE_IPA_DC)) + { p->fault_state = DCERPC_FAULT_OP_RNG_ERROR; return WERR_NERR_NOTPRIMARY; }