abbra commented on a pull request

"""
NACK. This is wrong.
In the case of external trust to a child domain we cannot run 
netr_DsRGetForestTrustInformation() against the child domain, regardless what 
credentials we have. Instead, we should run this request against the forest 
root domain using the credentials specified by the user.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/40#issuecomment-243752391
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to