From 01d545fcea82bdf4637aa2ee1f71d3d4d6e3f37a Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 19 Dec 2024 19:34:59 +0100 Subject: [PATCH] s4:rpc_server/lsa: WITHIN_FOREST together with FOREST_TRANSITIVE is invalid Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme --- source4/rpc_server/lsa/dcesrv_lsa.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/source4/rpc_server/lsa/dcesrv_lsa.c b/source4/rpc_server/lsa/dcesrv_lsa.c index 63ffec46c30..83661b068f0 100644 --- a/source4/rpc_server/lsa/dcesrv_lsa.c +++ b/source4/rpc_server/lsa/dcesrv_lsa.c @@ -1178,6 +1178,12 @@ static NTSTATUS dcesrv_lsa_CreateTrustedDomain_precheck( return NT_STATUS_INVALID_SID; } + if ((info->trust_attributes & LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) && + (info->trust_attributes & LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE)) + { + return NT_STATUS_INVALID_PARAMETER; + } + if ((info->trust_attributes & LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) && (info->trust_attributes & LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION)) { -- 2.47.2