Martin Babinsky 4ca671788c Always fetch forest info from root DCs when establishing one-way trust ...

Prior To Windows Server 2012R2, the `netr_DsRGetForestTrustInformation` calls
performed against non-root forest domain DCs were automatically routed to
the root domain DCs to resolve trust topology information.

This is no longer the case, so the `com.redhat.idm.trust-fetch-domains` oddjob
helper used to establish one-way needs to explicitly contact root domain DCs
even in the case when an external trust to non-root domain is requested.

https://fedorahosted.org/freeipa/ticket/6057

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2016-09-05 09:20:55 +02:00

..

etc

replica promotion: fix AVC denials in remote connection check

2016-02-11 18:40:39 +01:00

com.redhat.idm.trust-fetch-domains

Always fetch forest info from root DCs when establishing one-way trust

2016-09-05 09:20:55 +02:00

Makefile.am

replica install: add remote connection check over API

2015-12-11 18:44:13 +01:00

org.freeipa.server.conncheck

Do not log to file in remote conncheck side

2016-07-01 09:05:33 +02:00