ipaserver/dcerpc.py: be more open to what domains can be seen through the forest trust

https://fedorahosted.org/freeipa/ticket/4463

Reviewed-By: Sumit Bose <sbose@redhat.com>
This commit is contained in:
Alexander Bokovoy 2014-08-19 16:23:58 +03:00 committed by Martin Kosek
parent 1fd3a23884
commit d16b471cea

View File

@ -1039,7 +1039,7 @@ def fetch_domains(api, mydomain, trustdomain, creds=None):
result = [] result = []
for t in domains.array: for t in domains.array:
if ((t.trust_attributes & trust_attributes['NETR_TRUST_ATTRIBUTE_WITHIN_FOREST']) and if (not (t.trust_flags & trust_flags['NETR_TRUST_FLAG_PRIMARY']) and
(t.trust_flags & trust_flags['NETR_TRUST_FLAG_IN_FOREST'])): (t.trust_flags & trust_flags['NETR_TRUST_FLAG_IN_FOREST'])):
res = dict() res = dict()
res['cn'] = unicode(t.dns_name) res['cn'] = unicode(t.dns_name)