r23630: Found out what LSA_LOOKUP_NAMES level 5 means:

only query transitive forest trusts.

Guenther

diff --git a/source/passdb/lookup_sid.c b/source/passdb/lookup_sid.c
index dd7ffa8d819964bb14a500ac07daef443a6c4fd2..f6aacd17675353fe207a5be048af1e2fe5655a0b 100644 (file)
--- a/source/passdb/lookup_sid.c
+++ b/source/passdb/lookup_sid.c
@@ -631,7 +631,7 @@ static BOOL lookup_as_domain(const DOM_SID *sid, TALLOC_CTX *mem_ctx,
  * Level 2: Ask domain and trusted domains, no builtin and wkn
  * Level 3: Only ask domain
  * Level 4: W2k3ad: Only ask AD trusts
  * Level 2: Ask domain and trusted domains, no builtin and wkn
  * Level 3: Only ask domain
  * Level 4: W2k3ad: Only ask AD trusts

- * Level 5: Don't lookup anything
+ * Level 5: Only ask transitive forest trusts

  * Level 6: Like 4
  */
 
  * Level 6: Like 4
  */