From: Ralph Boehme Date: Thu, 8 Mar 2018 16:35:15 +0000 (+0100) Subject: s4: dsdb/password_hash: use UF_TRUST_ACCOUNT_MASK X-Git-Tag: talloc-2.1.12~184 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=20609aa260f0a84dff4574df4a1564884a813f92;p=thirdparty%2Fsamba.git s4: dsdb/password_hash: use UF_TRUST_ACCOUNT_MASK Signed-off-by: Ralph Boehme Reviewed-by: Andrew Bartlett Autobuild-User(master): Andrew Bartlett Autobuild-Date(master): Tue Mar 13 23:48:28 CET 2018 on sn-devel-144 --- diff --git a/source4/dsdb/samdb/ldb_modules/password_hash.c b/source4/dsdb/samdb/ldb_modules/password_hash.c index 1c1de09de77..c872f20eb23 100644 --- a/source4/dsdb/samdb/ldb_modules/password_hash.c +++ b/source4/dsdb/samdb/ldb_modules/password_hash.c @@ -3211,9 +3211,7 @@ static int setup_io(struct ph_context *ac, /* Only non-trust accounts have restrictions (possibly this test is the * wrong way around, but we like to be restrictive if possible */ - io->u.restrictions = !(io->u.userAccountControl - & (UF_INTERDOMAIN_TRUST_ACCOUNT | UF_WORKSTATION_TRUST_ACCOUNT - | UF_SERVER_TRUST_ACCOUNT)); + io->u.restrictions = !(io->u.userAccountControl & UF_TRUST_ACCOUNT_MASK); if (io->u.is_krbtgt) { io->u.restrictions = 0;