From 4e0a3ea705a793ef2f68805728caabd58bdf5788 Mon Sep 17 00:00:00 2001 From: Andrew Tridgell Date: Tue, 28 Sep 2010 19:10:27 -0700 Subject: s4-kdc: RODC DCs should be able to produce forwardable tickets Pair-Programmed-With: Andrew Bartlett --- source4/kdc/db-glue.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source4/kdc/db-glue.c b/source4/kdc/db-glue.c index cf7e4e460f..2f416c9ffa 100644 --- a/source4/kdc/db-glue.c +++ b/source4/kdc/db-glue.c @@ -703,7 +703,7 @@ static krb5_error_code samba_kdc_message2entry(krb5_context context, entry_ex->entry.flags.server = 1; entry_ex->entry.flags.client = 0; - entry_ex->entry.flags.forwardable = 0; + entry_ex->entry.flags.forwardable = 1; entry_ex->entry.flags.ok_as_delegate = 0; } else if (entry_ex->entry.flags.server && ent_type == SAMBA_KDC_ENT_TYPE_SERVER) { /* The account/password expiry only applies when the account is used as a -- cgit