From a87813bf420c19a99b1a19711e63d231cd4afd86 Mon Sep 17 00:00:00 2001
From: Alexander Bokovoy <abokovoy@redhat.com>
Date: Fri, 27 Sep 2013 12:36:59 +0200
Subject: ipaserver/dcerpc: remove use of trust account authentication

Since FreeIPA KDC supports adding MS-PAC to HTTP/ipa.server principal,
it is possible to use it when talking to the trusted AD DC.

Remove support for authenticating as trust account because it should not
really be used other than within Samba.
---
 ipalib/plugins/trust.py | 1 -
 1 file changed, 1 deletion(-)

(limited to 'ipalib/plugins')

diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py
index 53dee918..9ba1f562 100644
--- a/ipalib/plugins/trust.py
+++ b/ipalib/plugins/trust.py
@@ -551,7 +551,6 @@ sides.
                                                           None,
                                                           SCOPE_SUBTREE,
                                                           basedn=info_dn,
-                                                          use_http=True,
                                                           quiet=True)
 
                 if info_list:
-- 
cgit