Jeremy Allison wrote: > On Mon, Dec 22, 2008 at 07:41:52AM -0600, Gerald (Jerry) Carter wrote: > > Michael Adam wrote: > > > > > > Nick wrote: > > >> Is there a way to completely disable trusted domains in samba/winbind? > > >> Some > > >> of the trusted domains are inaccessible to the client machines, which > > >> causes > > >> winbind not to work due to all the timeouts/errors. I tried setting > > >> "allow > > >> trusted domains = no", but when looking at the debug logs it's obvious > > >> that > > >> winbind is still trying to look them up. It appears that winbind doesn't > > >> respect the "allow trusted domains" at all. > > > > > > Hmmm, you are right: The manual page seems to promise too much > > > in the description of "allow trusted domain". In fact looking at > > > the code, it is a smbd-only option. It prevents smbd to perform > > > explicit requests (like authentication) for trusted domains, but > > > it does not prevent winbind from walking the list of trusted domains > > > and trying to establish a connection to each of them (for instance > > > when enumating users). > > > > Thought I had fixed this. Patch against 3.2 that should work is attached. > > Pushed - thanks !
Thanks Jeremy, I didn't have time yet to take care of it. Cheers - Michael -- Michael Adam <m...@sernet.de> <ob...@samba.org> SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen phone: +49-551-370000-0, fax: +49-551-370000-9 AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.SerNet.DE, mailto: Info @ SerNet.DE
pgpz1umgIYw6C.pgp
Description: PGP signature
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
