s3-winbindd: set the can_do_validation6 also for trusted domain
authorMatthieu Patou <mat@matws.net>
Fri, 10 Feb 2012 19:45:21 +0000 (11:45 -0800)
committerKarolin Seeger <kseeger@samba.org>
Fri, 22 Jun 2012 19:38:28 +0000 (21:38 +0200)
commit618f2bdb27f0d97d76da960382d794afadf0ecf4
treee7835ef93a33e35d0426287ca336c3ed4e9ebb1e
parentfd6223b1aac60e4f9e1f0571886a638dcd3fb8cb
s3-winbindd: set the can_do_validation6 also for trusted domain

The flag can_do_validation6 was only set for the domain to which
winbindd is the member. Setting this flag in other domains (trusted
domain) if it's active directory domain is a good idea as it allow to do
level 6 validation also when winbindd is querying them directly.
(cherry picked from commit 05036fab0a9847219c73c0abd931a39fba0bccfd)

Address bug #8599 (WINBINDD_PAM_AUTH_CRAP returns invalid user session key).
(cherry picked from commit 01747a5554839f21992b8845328c4b08c3dd8ff8)
source3/winbindd/winbindd_cm.c