From d16b471ceaa59fceed3235c36536f6811bd5de8c Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy Date: Tue, 19 Aug 2014 16:23:58 +0300 Subject: ipaserver/dcerpc.py: be more open to what domains can be seen through the forest trust https://fedorahosted.org/freeipa/ticket/4463 Reviewed-By: Sumit Bose --- ipaserver/dcerpc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'ipaserver') diff --git a/ipaserver/dcerpc.py b/ipaserver/dcerpc.py index 4abc42f38..51b314f94 100644 --- a/ipaserver/dcerpc.py +++ b/ipaserver/dcerpc.py @@ -1039,7 +1039,7 @@ def fetch_domains(api, mydomain, trustdomain, creds=None): result = [] for t in domains.array: - if ((t.trust_attributes & trust_attributes['NETR_TRUST_ATTRIBUTE_WITHIN_FOREST']) and + if (not (t.trust_flags & trust_flags['NETR_TRUST_FLAG_PRIMARY']) and (t.trust_flags & trust_flags['NETR_TRUST_FLAG_IN_FOREST'])): res = dict() res['cn'] = unicode(t.dns_name) -- cgit