[PATCH] New option to disable scanning of trusted domains in winbindd

[Samba - samba-technical mailing list]

Hi!

Attached is a patch from metze that adds a new option to winbindd "winbind scan
trusted domains" that specifies whether winbindd enumerates trust.

With the recent changes to winbindd to learn about trusted domains when a user
of that domain authenticates plus mucho preperational stuff (the large patchsets
from yesterday), it is not necessary anymore to enumerate trusts in most
scenarios, so this option could be set to "no" in many setups. It remains
enabled for the upcoming release however as some stuff needs more work in
winbindd like pam_winbindd or idmap_rfc2307.

metze and I would like to get this into 4.8, so this is going to be included in
the final autobuild.

-slow

--
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/

[Samba - samba-technical mailing list]

On Thursday, 11 January 2018 14:07:49 CET Ralph Böhme via samba-technical
wrote:

> Hi!
>
> Attached is a patch from metze that adds a new option to winbindd "winbind
> scan trusted domains" that specifies whether winbindd enumerates trust.
>
> With the recent changes to winbindd to learn about trusted domains when a
> user of that domain authenticates plus mucho preperational stuff (the large
> patchsets from yesterday), it is not necessary anymore to enumerate trusts
> in most scenarios, so this option could be set to "no" in many setups. It
> remains enabled for the upcoming release however as some stuff needs more
> work in winbindd like pam_winbindd or idmap_rfc2307.
>
> metze and I would like to get this into 4.8, so this is going to be included
> in the final autobuild.

RB+

--
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             [hidden email]
www.samba.org