summaryrefslogtreecommitdiff
path: root/source3/param
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2017-11-29 16:02:28 +0100
committerKarolin Seeger <kseeger@samba.org>2018-01-13 12:55:08 +0100
commitb4e1e3019a1475cb8c1e3ab9314693d6ed130923 (patch)
tree674355a9d3e0d1011988560b6f79b519665e0dbd /source3/param
parent9fb36370a57904770e1c9ca96279a1854481d3f3 (diff)
downloadsamba-b4e1e3019a1475cb8c1e3ab9314693d6ed130923.tar.gz
winbindd: add "winbind scan trusted domains = no" to avoid trust enumeration
Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
Diffstat (limited to 'source3/param')
-rw-r--r--source3/param/loadparm.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index 582c8756ffa..f1f453e7ef1 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -822,6 +822,7 @@ static void init_globals(struct loadparm_context *lp_ctx, bool reinit_globals)
Globals.winbind_nss_info = str_list_make_v3_const(NULL, "template", NULL);
Globals.winbind_refresh_tickets = false;
Globals.winbind_offline_logon = false;
+ Globals.winbind_scan_trusted_domains = true;
Globals.idmap_cache_time = 86400 * 7; /* a week by default */
Globals.idmap_negative_cache_time = 120; /* 2 minutes by default */