Specify whether to allow Centrify DirectControl Agent to query trusted domains and forests for transitive trust information.
If you enable this policy by selecting the LDAP Cross-Forest Search box, Centrify DirectControl Agent generates a krb5.conf that includes information from all trusted forests and can be used to authenticate cross-forest users to Kerberos applications. If you disable this policy, Centrify DirectControl Agent does not query external trusted domains or forests for information.
By default, the configuration parameter set by this policy is enabled.
Querying external trusted forests can take a significant amount of time if the other forests are blocked by firewalls. You may want to set this parameter to false if your trust relationships, network topology, or firewalls are not configured properly for access.
This group policy modifies the adclient.ldap.trust.enabled setting in the Centrify DirectControl configuration file.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Timeouts |
Value Name | adclient.ldap.trust.enabled |
Value Type | REG_SZ |
Enabled Value | true |
Disabled Value | false |
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Timeouts |
Value Name | adclient.ldap.trust.enabled |
Value Type | REG_DWORD |
Default Value | 0 |
True Value | 1 |
False Value | 0 |
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Timeouts |
Value Name | adclient.ldap.trust.enabled |
Value Type | REG_DWORD |
Default Value | 0 |
True Value | 1 |
False Value | 0 |
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Timeouts |
Value Name | adclient.ldap.trust.enabled |
Value Type | REG_DWORD |
Default Value | 1 |
True Value | 1 |
False Value | 0 |
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Timeouts |
Value Name | adclient.ldap.trust.enabled |
Value Type | REG_DWORD |
Default Value | 1 |
True Value | 1 |
False Value | 0 |