Hi!
Attached is a patch from metze that adds a new option to winbindd "winbind scan
trusted domains" that specifies whether winbindd enumerates trust.
With the recent changes to winbindd to learn about trusted domains when a user
of that domain authenticates plus mucho preperational stuff (the large patchsets
from yesterday), it is not necessary anymore to enumerate trusts in most
scenarios, so this option could be set to "no" in many setups. It remains
enabled for the upcoming release however as some stuff needs more work in
winbindd like pam_winbindd or idmap_rfc2307.
metze and I would like to get this into 4.8, so this is going to be included in
the final autobuild.
-slow
--
Ralph Boehme, Samba Team
https://samba.org/Samba Developer, SerNet GmbH
https://sernet.de/en/samba/