70bd7c8 trusts: use ipaNTTrustPartner attribute to detect trust entries

Authored and Committed by mbasti 3 years ago
    trusts: use ipaNTTrustPartner attribute to detect trust entries
    
    Trust entries were found by presence of ipaNTSecurityIdentifier
    attribute. Unfortunately this attribute might not be there due the bug.
    As replacement for this, attribute ipaNTTrustPartner can be used.
    
    Note: other non trust entries located in cn=trusts subtree can be
    cross-realm principals.
    
    https://fedorahosted.org/freeipa/ticket/5665
    
    Reviewed-By: Tomas Babej <tbabej@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    
        
file modified
+5 -2