winbindd: transitive trust logic in trust_is_transitive()
authorRalph Boehme <slow@samba.org>
Tue, 28 Nov 2017 16:32:59 +0000 (17:32 +0100)
committerKarolin Seeger <kseeger@samba.org>
Sat, 13 Jan 2018 11:55:08 +0000 (12:55 +0100)
commita39cf19c2514d8f249951b77078683dd6a53504e
tree8d1667205b24199411a8c3a26e0fbf0c53ff362a
parent939592c660263b6f9969c30e4c6a1903fcc75831
winbindd: transitive trust logic in trust_is_transitive()

trust_is_transitive() currently defaults to transitive=true, unless
LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE, LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN or
LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL trust attribute is set.

This is not correct, for the trust to be transative,
LSA_TRUST_ATTRIBUTE_WITHIN_FOREST or LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE must
be set.

Logic taken from dsdb_trust_routing_by_name().

Signed-off-by: Ralph Boehme <slow@samba.org>
source3/winbindd/winbindd_misc.c