From 180245fce0f0d73d924ca6a25db3fc78934c40d1 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 4 Dec 2008 15:09:21 +0100
Subject: s4:kdc: allow a trusted domain to get kerberos tickets

metze
---
 source4/kdc/pac-glue.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'source4/kdc/pac-glue.c')

diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c
index 3f1c1fc63e..74bec85d02 100644
--- a/source4/kdc/pac-glue.c
+++ b/source4/kdc/pac-glue.c
@@ -270,13 +270,14 @@ krb5_error_code samba_kdc_check_client_access(void *priv,
 		}
 	}
 
+	/* we allow all kinds of trusts here */
 	nt_status = authsam_account_ok(tmp_ctx, 
 				       private->samdb, 
 				       MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT | MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT,
 				       private->msg,
 				       private->realm_ref_msg,
 				       workstation,
-				       name);
+				       name, true);
 	free(name);
 
 	if (NT_STATUS_IS_OK(nt_status))
-- 
cgit