winbindd: don't support PIM_TRUST and WITHIN_FOREST

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>

diff --git a/source3/winbindd/winbindd_util.c b/source3/winbindd/winbindd_util.c
index 28448cf6961a73ba860139d83e6cc8f5fda2bce7..71a6fc34cf3947f76b60914946232800d05e6970 100644 (file)
--- a/source3/winbindd/winbindd_util.c
+++ b/source3/winbindd/winbindd_util.c
@@ -1216,7 +1216,26 @@ static bool add_trusted_domains_dc(void)
                if (domains[i]->trust_direction & LSA_TRUST_DIRECTION_OUTBOUND) {
                        trust_flags |= NETR_TRUST_FLAG_OUTBOUND;
                }
+               if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_PIM_TRUST) {
+                       /*
+                        * We don't support PIM_TRUST yet.
+                        */
+                       DBG_WARNING("Ignoring PIM_TRUST trust to "
+                                   "domain[%s/%s]\n",
+                                   domains[i]->netbios_name,
+                                   domains[i]->domain_name);
+                       continue;
+               }
                if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) {
+                       /*
+                        * We don't support WITHIN_FOREST yet.
+                        */
+                       DBG_WARNING("Ignoring WITHIN_FOREST trust to "
+                                   "domain[%s/%s]\n",
+                                   domains[i]->netbios_name,
+                                   domains[i]->domain_name);
+                       continue;
+
                        trust_flags |= NETR_TRUST_FLAG_IN_FOREST;
                }