s4:kdc: disable support for CROSS_ORGANIZATION domains
authorStefan Metzmacher <metze@samba.org>
Thu, 1 Feb 2018 10:06:10 +0000 (11:06 +0100)
committerStefan Metzmacher <metze@samba.org>
Wed, 28 Feb 2018 18:45:13 +0000 (19:45 +0100)
commit31b5328c46c5f510ba234f75688886987276ee9e
treeac8cf3269fd8d0865b41c659f8ca75d6250ab2d4
parentd0a813a173be630c2def93cc55e4514204d265a2
s4:kdc: disable support for CROSS_ORGANIZATION domains

We don't support selective authentication yet,
so we shouldn't silently allow domain wide authentication
for such a trust.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13299

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Feb 28 19:45:13 CET 2018 on sn-devel-144
source4/kdc/db-glue.c