summaryrefslogtreecommitdiff
path: root/source4/kdc
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2008-12-04 15:09:21 +0100
committerStefan Metzmacher <metze@samba.org>2008-12-04 15:45:16 +0100
commit180245fce0f0d73d924ca6a25db3fc78934c40d1 (patch)
treef516ef075f5e2852a4998cf24bffb307f5880bc9 /source4/kdc
parent0f38bd90722469c6dbf1bcc7f56d3fbf6db3a8e8 (diff)
downloadsamba-180245fce0f0d73d924ca6a25db3fc78934c40d1.tar.gz
samba-180245fce0f0d73d924ca6a25db3fc78934c40d1.tar.bz2
samba-180245fce0f0d73d924ca6a25db3fc78934c40d1.zip
s4:kdc: allow a trusted domain to get kerberos tickets
metze
Diffstat (limited to 'source4/kdc')
-rw-r--r--source4/kdc/pac-glue.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 3f1c1fc63e..74bec85d02 100644
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -270,13 +270,14 @@ krb5_error_code samba_kdc_check_client_access(void *priv,
}
}
+ /* we allow all kinds of trusts here */
nt_status = authsam_account_ok(tmp_ctx,
private->samdb,
MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT | MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT,
private->msg,
private->realm_ref_msg,
workstation,
- name);
+ name, true);
free(name);
if (NT_STATUS_IS_OK(nt_status))