diff options
| author | Stefan Metzmacher <metze@samba.org> | 2017-11-29 16:02:28 +0100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2018-01-13 12:55:08 +0100 |
| commit | b4e1e3019a1475cb8c1e3ab9314693d6ed130923 (patch) | |
| tree | 674355a9d3e0d1011988560b6f79b519665e0dbd /lib | |
| parent | 9fb36370a57904770e1c9ca96279a1854481d3f3 (diff) | |
| download | samba-b4e1e3019a1475cb8c1e3ab9314693d6ed130923.tar.gz | |
winbindd: add "winbind scan trusted domains = no" to avoid trust enumeration
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/param/loadparm.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/param/loadparm.c b/lib/param/loadparm.c index a18407d9c07..f26545963d6 100644 --- a/lib/param/loadparm.c +++ b/lib/param/loadparm.c @@ -2729,6 +2729,7 @@ struct loadparm_context *loadparm_init(TALLOC_CTX *mem_ctx) lpcfg_do_global_parameter(lp_ctx, "winbind separator", "\\"); lpcfg_do_global_parameter(lp_ctx, "winbind sealed pipes", "True"); + lpcfg_do_global_parameter(lp_ctx, "winbind scan trusted domains", "True"); lpcfg_do_global_parameter(lp_ctx, "require strong key", "True"); lpcfg_do_global_parameter(lp_ctx, "winbindd socket directory", dyn_WINBINDD_SOCKET_DIR); lpcfg_do_global_parameter(lp_ctx, "ntp signd socket directory", dyn_NTP_SIGND_SOCKET_DIR); |