IPA: Read forest name for trusted forest roots as well

This will reduce special-casing when establishing forest roots as all
domains will contain the forest name.

Additionally, AD subdomains already contain the forest name.

Reviewed-by: Sumit Bose <sbose@redhat.com>

1 files changed, 15 insertions, 0 deletions

diff --git a/src/providers/ipa/ipa_subdomains.c b/src/providers/ipa/ipa_subdomains.c
index b67f1d9ca..28693cbd0 100644
--- a/src/providers/ipa/ipa_subdomains.c
+++ b/src/providers/ipa/ipa_subdomains.c
@@ -329,6 +329,7 @@ static errno_t ipa_subdom_get_forest(TALLOC_CTX *mem_ctx,
 {
     int ret;
     struct ldb_dn *dn = NULL;
+    const char *name;
     const struct ldb_val *val;
     char *forest = NULL;
 
@@ -340,6 +341,20 @@ static errno_t ipa_subdom_get_forest(TALLOC_CTX *mem_ctx,
     }
 
     if (ipa_subdom_is_member_dom(dn) == false) {
+        ret = sysdb_attrs_get_string(attrs, IPA_CN, &name);
+        if (ret) {
+            DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");
+            goto done;
+        }
+
+        forest = talloc_strdup(mem_ctx, name);
+        if (forest == NULL) {
+            DEBUG(SSSDBG_OP_FAILURE, "talloc_strndup failed.\n");
+            ret = ENOMEM;
+            goto done;
+        }
+
+        DEBUG(SSSDBG_TRACE_INTERNAL, "The forest name is %s\n", forest);
         ret = EOK;
         goto done;
     }