1 <samba:parameter xmlns:samba="http://samba.org/common">
2 <term><anchor id="ALLOWTRUSTEDDOMAINS"/>allow trusted domains (G)</term>
3 <listitem><para>This option only takes effect when the <link linkend="SECURITY"><parameter moreinfo="none">security</parameter></link> option is set to
4 <constant>server</constant> or <constant>domain</constant>.
5 If it is set to no, then attempts to connect to a resource from
6 a domain or workgroup other than the one which <ulink url="smbd.8.html">smbd</ulink> is running
7 in will fail, even if that domain is trusted by the remote server
8 doing the authentication.</para>
10 <para>This is useful if you only want your Samba server to
11 serve resources to users in the domain it is a member of. As
12 an example, suppose that there are two domains DOMA and DOMB. DOMB
13 is trusted by DOMA, which contains the Samba server. Under normal
14 circumstances, a user with an account in DOMB can then access the
15 resources of a UNIX account with the same account name on the
16 Samba server even if they do not have an account in DOMA. This
17 can make implementing a security boundary difficult.</para>
19 <para>Default: <command moreinfo="none">allow trusted domains = yes</command></para>