Attachment 14422 Details for Bug 11517 – Samba 4.8.4 patch to allow user policy for native domain to function, even when trusted domains are enabled.

[patch] Samba 4.8.4 patch to allow user policy for native domain to function, even when trusted domains are enabled.

remove_primary_flag_on_trusted_domains.patch (text/plain), 1.08 KB, created by Joshua Songy on 2018-08-15 19:45:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joshua Songy

Created: 2018-08-15 19:45:38 UTC

Size: 1.08 KB

patch

obsolete

>diff --git a/source4/rpc_server/netlogon/dcerpc_netlogon.c b/source4/rpc_server/netlogon/dcerpc_netlogon.c
>index 60761b8b3ee..14c720a849a 100644
>--- a/source4/rpc_server/netlogon/dcerpc_netlogon.c
>+++ b/source4/rpc_server/netlogon/dcerpc_netlogon.c
>@@ -2176,11 +2176,19 @@ static NTSTATUS fill_one_domain_info(TALLOC_CTX *mem_ctx,
> 		/* w2k8 only fills this on trusted domains */
> 		info->trust_extension.info = talloc_zero(mem_ctx, struct netr_trust_extension);
> 		info->trust_extension.length = 16;
>-		info->trust_extension.info->flags =
>-			NETR_TRUST_FLAG_TREEROOT |
>-			NETR_TRUST_FLAG_IN_FOREST |
>-			NETR_TRUST_FLAG_PRIMARY |
>-			NETR_TRUST_FLAG_NATIVE;
>+
>+		if (is_local) {
>+			info->trust_extension.info->flags =
>+				NETR_TRUST_FLAG_TREEROOT |
>+				NETR_TRUST_FLAG_IN_FOREST |
>+				NETR_TRUST_FLAG_PRIMARY |
>+				NETR_TRUST_FLAG_NATIVE;
>+		} else {
>+			info->trust_extension.info->flags =
>+				NETR_TRUST_FLAG_TREEROOT |
>+				NETR_TRUST_FLAG_IN_FOREST |
>+				NETR_TRUST_FLAG_NATIVE;
>+		}
> 
> 		info->trust_extension.info->parent_index = 0; /* should be index into array
> 								 of parent */

Actions: View

Attachments on bug 11517: 14222 | 14422 | 14450 | 14464 | 14465 | 14466