summaryrefslogtreecommitdiff
path: root/lib/param
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2017-03-22 12:11:26 +0100
committerAndrew Bartlett <abartlet@samba.org>2017-06-16 03:21:29 +0200
commitbcd558eb50814dfdc68bf49f082f9f644651cb38 (patch)
tree69f8a278b952e915068fd4fb5b962771fe56de2a /lib/param
parentb6e2ddaee1867b49710d22ebcb6c87b2f0a54a29 (diff)
downloadsamba-bcd558eb50814dfdc68bf49f082f9f644651cb38.tar.gz
docs-xml: change the default for "map untrusted to domain" to "auto"
This makes the behaviour much more robust, particularly with forest child domains over one-way forest trusts. Sadly we don't support this kind of setup with our current ADDC, so there's no way to have automated tests for this behaviour, but at least we know it doesn't break any existing tests. BUG: https://bugzilla.samba.org/show_bug.cgi?id=8630 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Diffstat (limited to 'lib/param')
-rw-r--r--lib/param/loadparm.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c
index 860f3e2c96c..9f32d7b27b0 100644
--- a/lib/param/loadparm.c
+++ b/lib/param/loadparm.c
@@ -2835,6 +2835,8 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx)
lpcfg_do_global_parameter(lp_ctx, "guest account", GUEST_ACCOUNT);
+ lpcfg_do_global_parameter(lp_ctx, "map untrusted to domain", "auto");
+
lpcfg_do_global_parameter(lp_ctx, "client schannel", "auto");
lpcfg_do_global_parameter(lp_ctx, "smb encrypt", "default");