From: Stefan Metzmacher <metze@samba.org>
Date: Mon, 23 Dec 2024 13:55:39 +0000 (+0100)
Subject: winbindd: don't support PIM_TRUST and WITHIN_FOREST
X-Git-Tag: tevent-0.17.0~820
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5f37749d81532fcda56a62176f5a9208e4cd9da2;p=thirdparty%2Fsamba.git

winbindd: don't support PIM_TRUST and WITHIN_FOREST

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
---

diff --git a/source3/winbindd/winbindd_util.c b/source3/winbindd/winbindd_util.c
index 28448cf6961..71a6fc34cf3 100644
--- a/source3/winbindd/winbindd_util.c
+++ b/source3/winbindd/winbindd_util.c
@@ -1216,7 +1216,26 @@ static bool add_trusted_domains_dc(void)
 		if (domains[i]->trust_direction & LSA_TRUST_DIRECTION_OUTBOUND) {
 			trust_flags |= NETR_TRUST_FLAG_OUTBOUND;
 		}
+		if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_PIM_TRUST) {
+			/*
+			 * We don't support PIM_TRUST yet.
+			 */
+			DBG_WARNING("Ignoring PIM_TRUST trust to "
+				    "domain[%s/%s]\n",
+				    domains[i]->netbios_name,
+				    domains[i]->domain_name);
+			continue;
+		}
 		if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) {
+			/*
+			 * We don't support WITHIN_FOREST yet.
+			 */
+			DBG_WARNING("Ignoring WITHIN_FOREST trust to "
+				    "domain[%s/%s]\n",
+				    domains[i]->netbios_name,
+				    domains[i]->domain_name);
+			continue;
+
 			trust_flags |= NETR_TRUST_FLAG_IN_FOREST;
 		}