From: Pavel Filipenský Date: Mon, 4 Aug 2025 21:26:02 +0000 (+0200) Subject: s3:netlogon: IPA DC is the PDC as well - allow ROLE_IPA_DC in _netr_DsRGetForestTrust... X-Git-Tag: samba-4.21.8~11 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=7bf2051aadd45562d5e99b10b9eced96cb9592e3;p=thirdparty%2Fsamba.git s3:netlogon: IPA DC is the PDC as well - allow ROLE_IPA_DC in _netr_DsRGetForestTrustInformation() BUG: https://bugzilla.samba.org/show_bug.cgi?id=15891 Signed-off-by: Pavel Filipenský Reviewed-by: Alexander Bokovoy Reviewed-by: Andreas Schneider (cherry picked from commit 1dbafcc4e4ff8f39af5ca737b30e9821413dd1f2) --- diff --git a/source3/rpc_server/netlogon/srv_netlog_nt.c b/source3/rpc_server/netlogon/srv_netlog_nt.c index e5abcbdbd84..53ace9e2a46 100644 --- a/source3/rpc_server/netlogon/srv_netlog_nt.c +++ b/source3/rpc_server/netlogon/srv_netlog_nt.c @@ -2655,7 +2655,10 @@ WERROR _netr_DsRGetForestTrustInformation(struct pipes_struct *p, return WERR_INVALID_FLAGS; } - if ((r->in.flags & DS_GFTI_UPDATE_TDO) && (lp_server_role() != ROLE_DOMAIN_PDC)) { + if ((r->in.flags & DS_GFTI_UPDATE_TDO) && + (lp_server_role() != ROLE_DOMAIN_PDC) && + (lp_server_role() != ROLE_IPA_DC)) + { p->fault_state = DCERPC_FAULT_OP_RNG_ERROR; return WERR_NERR_NOTPRIMARY; }