diff options
| author | Martin Babinsky <mbabinsk@redhat.com> | 2016-09-01 09:30:23 +0200 |
|---|---|---|
| committer | Martin Babinsky <mbabinsk@redhat.com> | 2016-09-05 09:20:55 +0200 |
| commit | 33f8685513e06f6a398036a78407d61c3ac2db86 (patch) | |
| tree | 6b75c535f394ceeb27c9b8b90ccb7ab3567528d9 /ipapython/secrets | |
| parent | 9d49b4c7e740fb909d8955d23aeb50b5d73d0b23 (diff) | |
| download | freeipa-33f8685513e06f6a398036a78407d61c3ac2db86.tar.gz freeipa-33f8685513e06f6a398036a78407d61c3ac2db86.tar.xz freeipa-33f8685513e06f6a398036a78407d61c3ac2db86.zip | |
Always fetch forest info from root DCs when establishing two-way trust
Prior To Windows Server 2012R2, the `netr_DsRGetForestTrustInformation` calls
performed against non-root forest domain DCs were automatically routed to the
root domain DCs to resolve trust topology information.
This is no longer the case, so the `dcerpc.fetch_domains` function must
explicitly contact root domain DCs even in the case when an external two-way
trust to non-root domain is requested.
https://fedorahosted.org/freeipa/ticket/6057
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'ipapython/secrets')
0 files changed, 0 insertions, 0 deletions