58513d3 Always fetch forest info from root DCs when establishing two-way trust

Authored and Committed by mbabinsk 7 years ago
    Always fetch forest info from root DCs when establishing two-way trust
    
    Prior To Windows Server 2012R2, the `netr_DsRGetForestTrustInformation` calls
    performed against non-root forest domain DCs were automatically routed to the
    root domain DCs to resolve trust topology information.
    
    This is no longer the case, so the `dcerpc.fetch_domains` function must
    explicitly contact root domain DCs even in the case when an external two-way
    trust to non-root domain is requested.
    
    https://fedorahosted.org/freeipa/ticket/6057
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    
        
file modified
+21 -8