mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-24 22:27:41 -05:00
Florence Blanc-Renaud
6f0cd075e5
When a trust was established pre samba 4.23, the trust domain object could contain ipanttrustattributes: 8 (LSA_TRUST_ATTRIBUTE_WITHIN_FOREST) This value prevents winbind restart. The current code replaces 0 with LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE but should also handle the case for LSA_TRUST_ATTRIBUTE_WITHIN_FOREST. In this case we should drop the bit and replace it by FOREST_TRANSITIVE one because otherwise Samba will skip the domain. Do not change the LDAP representation to allow older replicas to continue operations. Fixes: https://pagure.io/freeipa/issue/9892 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>