mirror of
https://github.com/samba-team/samba.git
synced 2024-12-28 07:21:54 +03:00
b824b1b7bf
This is necessary because MIT 1.5 can't deal with certain types (Tree Root) of transitive AD trusts. The workaround is to add a [capaths] directive to /etc/krb5.conf, which we don't automatically put into the krb5.conf winbind creates. The alternative would have been something like a "krb5 conf include", but I think if someone has to mess with /etc/krb5.conf at this level, it should be easy to add the site-local KDCs as well. Next alternative is to correctly figure out the [capaths] parameter for all trusted domains, but for that I don't have the time right now. Sorry :-) |
||
|---|---|---|
| .. | ||
| ads_status.c | ||
| ads_struct.c | ||
| ads_utils.c | ||
| authdata.c | ||
| cldap.c | ||
| disp_sec.c | ||
| dns.c | ||
| kerberos_keytab.c | ||
| kerberos_verify.c | ||
| kerberos.c | ||
| krb5_errs.c | ||
| krb5_setpw.c | ||
| ldap_printer.c | ||
| ldap_schema.c | ||
| ldap_user.c | ||
| ldap_utils.c | ||
| ldap.c | ||
| ndr.c | ||
| sasl_wrapping.c | ||
| sasl.c | ||
| util.c | ||