diff options
| author | Stefan Metzmacher <metze@samba.org> | 2008-12-04 15:09:21 +0100 |
|---|---|---|
| committer | Stefan Metzmacher <metze@samba.org> | 2008-12-04 15:45:16 +0100 |
| commit | 180245fce0f0d73d924ca6a25db3fc78934c40d1 (patch) | |
| tree | f516ef075f5e2852a4998cf24bffb307f5880bc9 /source4/kdc/pac-glue.c | |
| parent | 0f38bd90722469c6dbf1bcc7f56d3fbf6db3a8e8 (diff) | |
| download | samba-180245fce0f0d73d924ca6a25db3fc78934c40d1.tar.gz samba-180245fce0f0d73d924ca6a25db3fc78934c40d1.tar.bz2 samba-180245fce0f0d73d924ca6a25db3fc78934c40d1.zip | |
s4:kdc: allow a trusted domain to get kerberos tickets
metze
Diffstat (limited to 'source4/kdc/pac-glue.c')
| -rw-r--r-- | source4/kdc/pac-glue.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c index 3f1c1fc63e..74bec85d02 100644 --- a/source4/kdc/pac-glue.c +++ b/source4/kdc/pac-glue.c @@ -270,13 +270,14 @@ krb5_error_code samba_kdc_check_client_access(void *priv, } } + /* we allow all kinds of trusts here */ nt_status = authsam_account_ok(tmp_ctx, private->samdb, MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT | MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT, private->msg, private->realm_ref_msg, workstation, - name); + name, true); free(name); if (NT_STATUS_IS_OK(nt_status)) |