From 5f37749d81532fcda56a62176f5a9208e4cd9da2 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Mon, 23 Dec 2024 14:55:39 +0100 Subject: [PATCH] winbindd: don't support PIM_TRUST and WITHIN_FOREST Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme --- source3/winbindd/winbindd_util.c | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/source3/winbindd/winbindd_util.c b/source3/winbindd/winbindd_util.c index 28448cf6961..71a6fc34cf3 100644 --- a/source3/winbindd/winbindd_util.c +++ b/source3/winbindd/winbindd_util.c @@ -1216,7 +1216,26 @@ static bool add_trusted_domains_dc(void) if (domains[i]->trust_direction & LSA_TRUST_DIRECTION_OUTBOUND) { trust_flags |= NETR_TRUST_FLAG_OUTBOUND; } + if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_PIM_TRUST) { + /* + * We don't support PIM_TRUST yet. + */ + DBG_WARNING("Ignoring PIM_TRUST trust to " + "domain[%s/%s]\n", + domains[i]->netbios_name, + domains[i]->domain_name); + continue; + } if (domains[i]->trust_attributes & LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) { + /* + * We don't support WITHIN_FOREST yet. + */ + DBG_WARNING("Ignoring WITHIN_FOREST trust to " + "domain[%s/%s]\n", + domains[i]->netbios_name, + domains[i]->domain_name); + continue; + trust_flags |= NETR_TRUST_FLAG_IN_FOREST; } -- 2.47.2