s3-winbindd: set the can_do_validation6 also for trusted domain
authorMatthieu Patou <mat@matws.net>
Fri, 10 Feb 2012 19:45:21 +0000 (11:45 -0800)
committerMatthieu Patou <mat@matws.net>
Fri, 10 Feb 2012 20:52:19 +0000 (12:52 -0800)
The flag can_do_validation6 was only set for the domain to which
winbindd is the member. Setting this flag in other domains (trusted
domain) if it's active directory domain is a good idea as it allow to do
level 6 validation also when winbindd is querying them directly.

source3/winbindd/winbindd_cm.c

index 39ac28422e8ae34f2998b6704c10991f765fd0c6..3373d96f0aad6a04d2df4aa413c9e89c3a9ed22a 100644 (file)
@@ -1882,6 +1882,8 @@ static bool set_dc_type_and_flags_trustinfo( struct winbindd_domain *domain )
                                 "running active directory.\n", domain->name, 
                                 domain->active_directory ? "" : "NOT "));
 
+                       domain->can_do_ncacn_ip_tcp = domain->active_directory;
+                       domain->can_do_validation6 = domain->active_directory;
 
                        domain->initialized = True;