freeipa

#9474 Investigate bad policy handle issue with Samba 4.19 and Windows Server 2022
Opened by abbra. Modified

Open
Close Issue

When using Samba 4.19, establishing trust to AD fails at the step to set forest transitive property. Windows Server 2022 reports that we use invalid trustdom handle:

rpc reply data:
[0000] 00 00 00 00                                         ....
     lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
        in: struct lsa_CreateTrustedDomainEx2
            policy_handle            : *
                policy_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 55653768-3b1e-4d53-996b-a85205b7cd32
            info                     : *
                info: struct lsa_TrustDomainInfoInfoEx
                    domain_name: struct lsa_StringLarge
                        length                   : 0x0012 (18)
                        size                     : 0x0014 (20)
                        string                   : *
                            string                   : 'ipa1.test'
                    netbios_name: struct lsa_StringLarge
                        length                   : 0x0008 (8)
                        size                     : 0x000a (10)
                        string                   : *
                            string                   : 'IPA1'
                    sid                      : *
                        sid                      : S-1-5-21-790702333-3825749031-3739951824
                    trust_direction          : 0x00000003 (3)
                           1: LSA_TRUST_DIRECTION_INBOUND
                           1: LSA_TRUST_DIRECTION_OUTBOUND
                    trust_type               : LSA_TRUST_TYPE_UPLEVEL (2)
                    trust_attributes         : 0x00000000 (0)
                           0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
                           0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
                           0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
                           0: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
                           0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
                           0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
                           0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
                           0: LSA_TRUST_ATTRIBUTE_PIM_TRUST
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
            auth_info_internal       : *
                auth_info_internal: struct lsa_TrustDomainInfoAuthInfoInternal
                    auth_blob: struct lsa_DATA_BUF2
                        size                     : 0x00000440 (1088)
                        data                     : *
                            data: ARRAY(1088)
[0000] E4 DE 9A E3 37 1D 7A B5   16 D4 26 AE 2A 9D 15 E1   ....7.z. ..&.*...
[0010] 16 E4 46 77 5A AC 71 8A   EF 14 4F B7 26 84 65 CB   ..FwZ.q. ..O.&.e.
[0020] D1 D5 CE 9D 11 18 0E 90   32 BF 6E FB BF 5C 2D 9F   ........ 2.n..\-.
[0030] D5 95 7F 68 BA F5 84 F7   DE 76 27 61 03 68 3D D0   ...h.... .v'a.h=.
[0040] 3C 9F A5 29 13 0B F0 E6   16 65 B4 10 01 0B CC 60   <..).... .e.....`
[0050] 7D A8 04 44 E7 CB 24 78   BC 16 E7 B1 7A 47 76 83   }..D..$x ....zGv.
[0060] 94 1A 51 5B 6A F4 47 DE   3B DD 96 E1 6F 89 44 B0   ..Q[j.G. ;...o.D.
[0070] 1C FF AE FF 14 1C 6D 23   21 E5 B1 FB CD E4 74 DC   ......m# !.....t.
[0080] 5D FF B5 83 89 41 38 2F   E6 EC 17 91 FE 0B A0 77   ]....A8/ .......w
[0090] 1D BC EB EB 26 86 BF 98   CF 4F 6C 0B 17 6C 20 4B   ....&... .Ol..l K
[00A0] 98 8F A8 2A E4 5F 71 65   E6 32 AA 36 6A 79 42 A1   ...*._qe .2.6jyB.
[00B0] 1D 88 5C 9D 1D D1 2B 39   A1 E4 6B 95 1F BC 23 FB   ..\...+9 ..k...#.
[00C0] 77 0C DA 82 24 95 BA B3   99 EA E0 CA EE D0 E3 24   w...$... .......$
[00D0] E9 FE A4 67 D3 2C CE E6   37 50 2B 74 20 C6 5E F8   ...g.,.. 7P+t .^.
[00E0] 0B 63 58 01 7F CA 76 D2   8C 44 02 25 3E 03 68 37   .cX...v. .D.%>.h7
[00F0] 11 04 41 05 EC E0 39 08   E8 29 44 4D 6E 63 63 B9   ..A...9. .)DMncc.
[0100] 11 A8 53 BF BD EF 83 80   80 24 2C 9B 04 A9 D3 C5   ..S..... .$,.....
[0110] DB 18 8F 7E B9 BC FE 7B   8A B3 C8 68 87 9D 0F 36   ...~...{ ...h...6
[0120] D4 2C B2 0C E2 9E 80 3C   B2 16 F0 80 85 64 73 39   .,.....< .....ds9
[0130] F2 74 42 6F 57 A2 18 31   09 CA 87 03 54 28 09 C1   .tBoW..1 ....T(..
[0140] 22 35 F2 B4 C0 C2 39 04   A8 9F 09 EB 1B 67 06 0E   "5....9. .....g..
[0150] 72 54 E9 F8 EE 15 F5 4C   B6 AD 22 7B 2F 2D 4F BB   rT.....L .."{/-O.
[0160] B1 C9 7C 44 EB C6 B2 18   DA 68 E3 17 BA 61 AE C7   ..|D.... .h...a..
[0170] AC D2 DE 0C A2 E5 D2 6A   64 CF DF 7E E0 42 FA 7E   .......j d..~.B.~
[0180] 99 8F C9 B8 1D 21 51 30   E5 9A E9 CC F3 6C 60 28   .....!Q0 .....l`(
[0190] 94 39 13 40 1C B9 69 39   75 55 81 CA 65 7F 58 1C   .9.@..i9 uU..e.X.
[01A0] 0D C1 4C F2 23 EE 24 DD   BD 97 72 24 7C FA CA 95   ..L.#.$. ..r$|...
[01B0] AA 6B 0E 9E 0D CF 7C BA   21 6D 40 AA 2C 47 D4 BA   .k....|. !m@.,G..
[01C0] CB 8A E8 BA 35 04 20 AE   B7 D1 95 3E 34 D0 97 EC   ....5. . ...>4...
[01D0] 3C 83 E5 DD 98 05 84 09   26 8A B1 53 27 9A 36 F9   <....... &..S'.6.
[01E0] A0 99 C5 26 52 15 8F B1   52 19 03 91 4C 5A C5 1C   ...&R... R...LZ..
[01F0] 00 4F 28 F1 AC 37 65 FA   FE 8D D4 F4 21 05 34 F5   .O(..7e. ....!.4.
[0200] D3 24 C8 58 4A F1 CA 04   96 66 7B 0E 2A AB F0 D9   .$.XJ... .f{.*...
[0210] 95 5E B0 92 EE 83 56 D3   45 B8 F2 B9 5F 8F DA 72   .^....V. E..._..r
[0220] E2 38 4A 08 C2 9F 91 52   D7 CC 1D D0 55 50 C5 E6   .8J....R ....UP..
[0230] 38 67 EC 1C 91 73 6E F7   C5 AD EA B7 53 D3 9F E5   8g...sn. ....S...
[0240] CC 8B 41 DB 71 67 09 AE   D4 63 77 64 FD 57 78 7F   ..A.qg.. .cwd.Wx.
[0250] 3B 65 FF A9 2F 62 7B 80   0E 21 78 D9 56 6A FC 40   ;e../b{. .!x.Vj.@
[0260] 71 5A 7F 7E 20 EF CA BD   18 6B A8 D8 41 70 5B 02   qZ.~ ... .k..Ap[.
[0270] 2D 5B 5A DA 78 A8 0A 0C   3B 86 09 C2 C3 01 0E 15   -[Z.x... ;.......
[0280] 68 FF 4B AF 54 A0 A6 B8   8E 05 4D 5C EB 87 4E EF   h.K.T... ..M\..N.
[0290] CB EE 83 2E F0 D7 BA E6   DB 95 57 27 74 6E 8C 1D   ........ ..W'tn..
[02A0] C9 E4 77 B7 9B 34 71 A2   4B 55 41 4C 5A 7D 8F 78   ..w..4q. KUALZ}.x
[02B0] F1 82 EE F5 48 9E 54 67   BC D0 F9 67 37 36 59 13   ....H.Tg ...g76Y.
[02C0] E7 60 63 FF CA 89 65 FD   F5 32 14 3B A9 F8 2D 14   .`c...e. .2.;..-.
[02D0] 46 83 73 30 9A 42 7C C6   29 BA 77 8E 84 27 92 28   F.s0.B|. ).w..'.(
[02E0] D4 94 C6 86 AE E3 87 43   0D 53 F5 28 B6 90 74 1B   .......C .S.(..t.
[02F0] CB 76 F1 EA D8 4A A3 5F   F3 14 99 E5 A8 53 DB 95   .v...J._ .....S..
[0300] 75 D1 47 D3 B9 32 E6 C5   96 D3 74 A9 47 03 DB AF   u.G..2.. ..t.G...
[0310] 70 C5 99 8B 26 CD E2 31   9F 24 67 B4 FB BB 5A 89   p...&..1 .$g...Z.
[0320] F3 25 7C 5A FA 81 05 29   6A AC 88 8A 1C A4 01 59   .%|Z...) j......Y
[0330] FE 58 1F 76 23 20 A0 F3   C0 8D 78 58 D5 60 1C 6C   .X.v# .. ..xX.`.l
[0340] D6 52 AD A8 59 CE 57 5C   46 CE AA 55 FB 78 42 5E   .R..Y.W\ F..U.xB^
[0350] 99 56 47 BB 7D 5B 25 3F   26 78 79 DF 06 C4 25 BE   .VG.}[%? &xy...%.
[0360] 0B C8 AC 26 A1 A9 4E 00   CA B0 6B E2 3E 54 99 47   ...&..N. ..k.>T.G
[0370] C6 35 FF F3 92 09 E7 B0   1D 22 08 C3 E2 F4 82 E0   .5...... ."......
[0380] 28 CA D7 D9 61 B3 E6 87   D8 69 AB 77 58 0D 60 BE   (...a... .i.wX.`.
[0390] 64 32 4A 88 CA 48 9C BF   D8 0A A8 87 32 54 E6 F0   d2J..H.. ....2T..
[03A0] DB E8 11 D9 3C 28 61 FA   CC 07 C0 26 A9 88 58 FE   ....<(a. ...&..X.
[03B0] E7 B7 AA 29 92 9B AB C9   9A CD 3A 16 FD 9A 89 CF   ...).... ..:.....
[03C0] 73 BD 81 D8 F3 5C 11 79   6A 63 28 6B F8 05 83 22   s....\.y jc(k..."
[03D0] B5 EC 48 4C CA 7B 3D 3C   2F 18 EC 65 7C DD CB 48   ..HL.{=< /..e|..H
[03E0] 5E A0 5B 70 D8 44 62 B2   62 DE C1 7C 22 AD A5 96   ^.[p.Db. b..|"...
[03F0] F5 54 AC 76 4A C9 F8 7D   03 BC E1 52 B3 9A 21 7A   .T.vJ..} ...R..!z
[0400] CE 6C 81 A4 CF DA F3 02   52 45 8C 3C 1C B1 C2 99   .l...... RE.<....
[0410] E3 8D 98 AB BF 64 62 CD   D7 01 50 CE 77 66 F5 FA   .....db. ..P.wf..
[0420] 8D D3 4B 6E 58 20 34 E4   83 D3 F3 E2 24 AA 2F 4A   ..KnX 4. ....$./J
[0430] 91 76 64 AD 31 96 81 D9   D0 DA 67 F7 24 1C 7A B8   .vd.1... ..g.$.z.
            access_mask              : 0x00010000 (65536)
                   0: LSA_TRUSTED_QUERY_DOMAIN_NAME
                   0: LSA_TRUSTED_QUERY_CONTROLLERS
                   0: LSA_TRUSTED_SET_CONTROLLERS
                   0: LSA_TRUSTED_QUERY_POSIX  
                   0: LSA_TRUSTED_SET_POSIX    
                   0: LSA_TRUSTED_SET_AUTH     
                   0: LSA_TRUSTED_QUERY_AUTH   
rpc request data:
[0000] 00 00 00 00 68 37 65 55   1E 3B 53 4D 99 6B A8 52   ....h7eU .;SM.k.R
[0010] 05 B7 CD 32 12 00 14 00   00 00 02 00 08 00 0A 00   ...2.... ........
[0020] 04 00 02 00 08 00 02 00   03 00 00 00 02 00 00 00   ........ ........
[0030] 00 00 00 00 0A 00 00 00   00 00 00 00 09 00 00 00   ........ ........
[0040] 69 00 70 00 61 00 31 00   2E 00 74 00 65 00 73 00   i.p.a.1. ..t.e.s.
[0050] 74 00 00 00 05 00 00 00   00 00 00 00 04 00 00 00   t....... ........
[0060] 49 00 50 00 41 00 31 00   04 00 00 00 01 04 00 00   I.P.A.1. ........
[0070] 00 00 00 05 15 00 00 00   FD 28 21 2F 27 4C 08 E4   ........ .(!/'L..
[0080] D0 22 EB DE 40 04 00 00   0C 00 02 00 40 04 00 00   ."..@... ....@...
[0090] E4 DE 9A E3 37 1D 7A B5   16 D4 26 AE 2A 9D 15 E1   ....7.z. ..&.*...
[00A0] 16 E4 46 77 5A AC 71 8A   EF 14 4F B7 26 84 65 CB   ..FwZ.q. ..O.&.e.
[00B0] D1 D5 CE 9D 11 18 0E 90   32 BF 6E FB BF 5C 2D 9F   ........ 2.n..\-.
[00C0] D5 95 7F 68 BA F5 84 F7   DE 76 27 61 03 68 3D D0   ...h.... .v'a.h=.
[00D0] 3C 9F A5 29 13 0B F0 E6   16 65 B4 10 01 0B CC 60   <..).... .e.....`
[00E0] 7D A8 04 44 E7 CB 24 78   BC 16 E7 B1 7A 47 76 83   }..D..$x ....zGv.
[00F0] 94 1A 51 5B 6A F4 47 DE   3B DD 96 E1 6F 89 44 B0   ..Q[j.G. ;...o.D.
[0100] 1C FF AE FF 14 1C 6D 23   21 E5 B1 FB CD E4 74 DC   ......m# !.....t.
[0110] 5D FF B5 83 89 41 38 2F   E6 EC 17 91 FE 0B A0 77   ]....A8/ .......w
[0120] 1D BC EB EB 26 86 BF 98   CF 4F 6C 0B 17 6C 20 4B   ....&... .Ol..l K
[0130] 98 8F A8 2A E4 5F 71 65   E6 32 AA 36 6A 79 42 A1   ...*._qe .2.6jyB.
[0140] 1D 88 5C 9D 1D D1 2B 39   A1 E4 6B 95 1F BC 23 FB   ..\...+9 ..k...#.
[0150] 77 0C DA 82 24 95 BA B3   99 EA E0 CA EE D0 E3 24   w...$... .......$
[0160] E9 FE A4 67 D3 2C CE E6   37 50 2B 74 20 C6 5E F8   ...g.,.. 7P+t .^.
[0170] 0B 63 58 01 7F CA 76 D2   8C 44 02 25 3E 03 68 37   .cX...v. .D.%>.h7
[0180] 11 04 41 05 EC E0 39 08   E8 29 44 4D 6E 63 63 B9   ..A...9. .)DMncc.
[0190] 11 A8 53 BF BD EF 83 80   80 24 2C 9B 04 A9 D3 C5   ..S..... .$,.....
[01A0] DB 18 8F 7E B9 BC FE 7B   8A B3 C8 68 87 9D 0F 36   ...~...{ ...h...6
[01B0] D4 2C B2 0C E2 9E 80 3C   B2 16 F0 80 85 64 73 39   .,.....< .....ds9
[01C0] F2 74 42 6F 57 A2 18 31   09 CA 87 03 54 28 09 C1   .tBoW..1 ....T(..
[01D0] 22 35 F2 B4 C0 C2 39 04   A8 9F 09 EB 1B 67 06 0E   "5....9. .....g..
[01E0] 72 54 E9 F8 EE 15 F5 4C   B6 AD 22 7B 2F 2D 4F BB   rT.....L .."{/-O.
[01F0] B1 C9 7C 44 EB C6 B2 18   DA 68 E3 17 BA 61 AE C7   ..|D.... .h...a..
[0200] AC D2 DE 0C A2 E5 D2 6A   64 CF DF 7E E0 42 FA 7E   .......j d..~.B.~
[0210] 99 8F C9 B8 1D 21 51 30   E5 9A E9 CC F3 6C 60 28   .....!Q0 .....l`(
[0220] 94 39 13 40 1C B9 69 39   75 55 81 CA 65 7F 58 1C   .9.@..i9 uU..e.X.
[0230] 0D C1 4C F2 23 EE 24 DD   BD 97 72 24 7C FA CA 95   ..L.#.$. ..r$|...
[0240] AA 6B 0E 9E 0D CF 7C BA   21 6D 40 AA 2C 47 D4 BA   .k....|. !m@.,G..
[0250] CB 8A E8 BA 35 04 20 AE   B7 D1 95 3E 34 D0 97 EC   ....5. . ...>4...
[0260] 3C 83 E5 DD 98 05 84 09   26 8A B1 53 27 9A 36 F9   <....... &..S'.6.
[0270] A0 99 C5 26 52 15 8F B1   52 19 03 91 4C 5A C5 1C   ...&R... R...LZ..
[0280] 00 4F 28 F1 AC 37 65 FA   FE 8D D4 F4 21 05 34 F5   .O(..7e. ....!.4.
[0290] D3 24 C8 58 4A F1 CA 04   96 66 7B 0E 2A AB F0 D9   .$.XJ... .f{.*...
[02A0] 95 5E B0 92 EE 83 56 D3   45 B8 F2 B9 5F 8F DA 72   .^....V. E..._..r
[02B0] E2 38 4A 08 C2 9F 91 52   D7 CC 1D D0 55 50 C5 E6   .8J....R ....UP..
[02C0] 38 67 EC 1C 91 73 6E F7   C5 AD EA B7 53 D3 9F E5   8g...sn. ....S...
[02D0] CC 8B 41 DB 71 67 09 AE   D4 63 77 64 FD 57 78 7F   ..A.qg.. .cwd.Wx.
[02E0] 3B 65 FF A9 2F 62 7B 80   0E 21 78 D9 56 6A FC 40   ;e../b{. .!x.Vj.@
[02F0] 71 5A 7F 7E 20 EF CA BD   18 6B A8 D8 41 70 5B 02   qZ.~ ... .k..Ap[.
[0300] 2D 5B 5A DA 78 A8 0A 0C   3B 86 09 C2 C3 01 0E 15   -[Z.x... ;.......
[0310] 68 FF 4B AF 54 A0 A6 B8   8E 05 4D 5C EB 87 4E EF   h.K.T... ..M\..N.
[0320] CB EE 83 2E F0 D7 BA E6   DB 95 57 27 74 6E 8C 1D   ........ ..W'tn..
[0330] C9 E4 77 B7 9B 34 71 A2   4B 55 41 4C 5A 7D 8F 78   ..w..4q. KUALZ}.x
[0340] F1 82 EE F5 48 9E 54 67   BC D0 F9 67 37 36 59 13   ....H.Tg ...g76Y.
[0350] E7 60 63 FF CA 89 65 FD   F5 32 14 3B A9 F8 2D 14   .`c...e. .2.;..-.
[0360] 46 83 73 30 9A 42 7C C6   29 BA 77 8E 84 27 92 28   F.s0.B|. ).w..'.(
[0370] D4 94 C6 86 AE E3 87 43   0D 53 F5 28 B6 90 74 1B   .......C .S.(..t.
[0380] CB 76 F1 EA D8 4A A3 5F   F3 14 99 E5 A8 53 DB 95   .v...J._ .....S..
[0390] 75 D1 47 D3 B9 32 E6 C5   96 D3 74 A9 47 03 DB AF   u.G..2.. ..t.G...
[03A0] 70 C5 99 8B 26 CD E2 31   9F 24 67 B4 FB BB 5A 89   p...&..1 .$g...Z.
[03B0] F3 25 7C 5A FA 81 05 29   6A AC 88 8A 1C A4 01 59   .%|Z...) j......Y
[03C0] FE 58 1F 76 23 20 A0 F3   C0 8D 78 58 D5 60 1C 6C   .X.v# .. ..xX.`.l
[03D0] D6 52 AD A8 59 CE 57 5C   46 CE AA 55 FB 78 42 5E   .R..Y.W\ F..U.xB^
[03E0] 99 56 47 BB 7D 5B 25 3F   26 78 79 DF 06 C4 25 BE   .VG.}[%? &xy...%.
[03F0] 0B C8 AC 26 A1 A9 4E 00   CA B0 6B E2 3E 54 99 47   ...&..N. ..k.>T.G
[0400] C6 35 FF F3 92 09 E7 B0   1D 22 08 C3 E2 F4 82 E0   .5...... ."......
[0410] 28 CA D7 D9 61 B3 E6 87   D8 69 AB 77 58 0D 60 BE   (...a... .i.wX.`.
[0420] 64 32 4A 88 CA 48 9C BF   D8 0A A8 87 32 54 E6 F0   d2J..H.. ....2T..
[0430] DB E8 11 D9 3C 28 61 FA   CC 07 C0 26 A9 88 58 FE   ....<(a. ...&..X.
[0440] E7 B7 AA 29 92 9B AB C9   9A CD 3A 16 FD 9A 89 CF   ...).... ..:.....
[0450] 73 BD 81 D8 F3 5C 11 79   6A 63 28 6B F8 05 83 22   s....\.y jc(k..."
[0460] B5 EC 48 4C CA 7B 3D 3C   2F 18 EC 65 7C DD CB 48   ..HL.{=< /..e|..H
[0470] 5E A0 5B 70 D8 44 62 B2   62 DE C1 7C 22 AD A5 96   ^.[p.Db. b..|"...
[0480] F5 54 AC 76 4A C9 F8 7D   03 BC E1 52 B3 9A 21 7A   .T.vJ..} ...R..!z
[0490] CE 6C 81 A4 CF DA F3 02   52 45 8C 3C 1C B1 C2 99   .l...... RE.<....
[04A0] E3 8D 98 AB BF 64 62 CD   D7 01 50 CE 77 66 F5 FA   .....db. ..P.wf..
[04B0] 8D D3 4B 6E 58 20 34 E4   83 D3 F3 E2 24 AA 2F 4A   ..KnX 4. ....$./J
[04C0] 91 76 64 AD 31 96 81 D9   D0 DA 67 F7 24 1C 7A B8   .vd.1... ..g.$.z.
[04D0] 00 00 01 00                                         ....
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_CreateTrustedDomainEx2: struct lsa_CreateTrustedDomainEx2
        out: struct lsa_CreateTrustedDomainEx2
            trustdom_handle          : *
                trustdom_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 1f2ed5dc-9922-42a6-b889-0a350ea64f15
            result                   : NT_STATUS_OK
rpc reply data:
[0000] 00 00 00 00 DC D5 2E 1F   22 99 A6 42 B8 89 0A 35   ........ "..B...5
[0010] 0E A6 4F 15 00 00 00 00                             ..O.....
     lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
        in: struct lsa_OpenTrustedDomainByName
            handle                   : *
                handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 55653768-3b1e-4d53-996b-a85205b7cd32
            name: struct lsa_String
                length                   : 0x0012 (18)
                size                     : 0x0012 (18)
                string                   : *
                    string                   : 'ipa1.test'
            access_mask              : 0x02000000 (33554432)
                   0: LSA_TRUSTED_QUERY_DOMAIN_NAME
                   0: LSA_TRUSTED_QUERY_CONTROLLERS
                   0: LSA_TRUSTED_SET_CONTROLLERS
                   0: LSA_TRUSTED_QUERY_POSIX  
                   0: LSA_TRUSTED_SET_POSIX    
                   0: LSA_TRUSTED_SET_AUTH     
                   0: LSA_TRUSTED_QUERY_AUTH   
rpc request data:
[0000] 00 00 00 00 68 37 65 55   1E 3B 53 4D 99 6B A8 52   ....h7eU .;SM.k.R
[0010] 05 B7 CD 32 12 00 12 00   00 00 02 00 09 00 00 00   ...2.... ........
[0020] 00 00 00 00 09 00 00 00   69 00 70 00 61 00 31 00   ........ i.p.a.1.
[0030] 2E 00 74 00 65 00 73 00   74 00 00 00 00 00 00 02   ..t.e.s. t.......
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_OpenTrustedDomainByName: struct lsa_OpenTrustedDomainByName
        out: struct lsa_OpenTrustedDomainByName
            trustdom_handle          : *
                trustdom_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 9f14b6db-0e9f-4b53-8b0e-50dff6f223a7
            result                   : NT_STATUS_OK
rpc reply data:
[0000] 00 00 00 00 DB B6 14 9F   9F 0E 53 4B 8B 0E 50 DF   ........ ..SK..P.
[0010] F6 F2 23 A7 00 00 00 00                             ..#.....
     lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
        in: struct lsa_SetInformationTrustedDomain
            trustdom_handle          : *
                trustdom_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 9f14b6db-0e9f-4b53-8b0e-50dff6f223a7
            level                    : LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES (13)
            info                     : *
                info                     : union lsa_TrustedDomainInfo(case 13)
                enc_types: struct lsa_TrustDomainInfoSupportedEncTypes
                    enc_types                : 0x0000001c (28)
                           0: KERB_ENCTYPE_DES_CBC_CRC 
                           0: KERB_ENCTYPE_DES_CBC_MD5 
                           1: KERB_ENCTYPE_RC4_HMAC_MD5
                           1: KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96
                           1: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96
                           0: KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96_SK
                           0: KERB_ENCTYPE_FAST_SUPPORTED
                           0: KERB_ENCTYPE_COMPOUND_IDENTITY_SUPPORTED
                           0: KERB_ENCTYPE_CLAIMS_SUPPORTED
                           0: KERB_ENCTYPE_RESOURCE_SID_COMPRESSION_DISABLED
rpc request data:
[0000] 00 00 00 00 DB B6 14 9F   9F 0E 53 4B 8B 0E 50 DF   ........ ..SK..P.
[0010] F6 F2 23 A7 0D 00 0D 00   1C 00 00 00               ..#..... ....
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
        out: struct lsa_SetInformationTrustedDomain
            result                   : NT_STATUS_OK
rpc reply data:
[0000] 00 00 00 00                                         ....
     lsa_QueryTrustedDomainInfo: struct lsa_QueryTrustedDomainInfo
        in: struct lsa_QueryTrustedDomainInfo
            trustdom_handle          : *
                trustdom_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 9f14b6db-0e9f-4b53-8b0e-50dff6f223a7
            level                    : LSA_TRUSTED_DOMAIN_INFO_INFO_EX (6)
rpc request data:
[0000] 00 00 00 00 DB B6 14 9F   9F 0E 53 4B 8B 0E 50 DF   ........ ..SK..P.
[0010] F6 F2 23 A7 06 00                                   ..#...
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_QueryTrustedDomainInfo: struct lsa_QueryTrustedDomainInfo
        out: struct lsa_QueryTrustedDomainInfo
            info                     : *
                info                     : *
                    info                     : union lsa_TrustedDomainInfo(case 6)
                    info_ex: struct lsa_TrustDomainInfoInfoEx
                        domain_name: struct lsa_StringLarge
                            length                   : 0x0012 (18)
                            size                     : 0x0014 (20)
                            string                   : *
                                string                   : 'ipa1.test'
                        netbios_name: struct lsa_StringLarge
                            length                   : 0x0008 (8)
                            size                     : 0x000a (10)
                            string                   : *
                                string                   : 'IPA1'
                        sid                      : *
                            sid                      : S-1-5-21-790702333-3825749031-3739951824
                        trust_direction          : 0x00000003 (3)
                               1: LSA_TRUST_DIRECTION_INBOUND
                               1: LSA_TRUST_DIRECTION_OUTBOUND
                        trust_type               : LSA_TRUST_TYPE_UPLEVEL (2)
                        trust_attributes         : 0x00000000 (0)
                               0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
                               0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
                               0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
                               0: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
                               0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
                               0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
                               0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
                               0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
                               0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
                               0: LSA_TRUST_ATTRIBUTE_PIM_TRUST
                               0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
            result                   : NT_STATUS_OK
rpc reply data:
[0000] 00 00 02 00 06 00 00 00   12 00 14 00 04 00 02 00   ........ ........
[0010] 08 00 0A 00 08 00 02 00   0C 00 02 00 03 00 00 00   ........ ........
[0020] 02 00 00 00 00 00 00 00   0A 00 00 00 00 00 00 00   ........ ........
[0030] 09 00 00 00 69 00 70 00   61 00 31 00 2E 00 74 00   ....i.p. a.1...t.
[0040] 65 00 73 00 74 00 00 00   05 00 00 00 00 00 00 00   e.s.t... ........
[0050] 04 00 00 00 49 00 50 00   41 00 31 00 04 00 00 00   ....I.P. A.1.....
[0060] 01 04 00 00 00 00 00 05   15 00 00 00 FD 28 21 2F   ........ .....(!/
[0070] 27 4C 08 E4 D0 22 EB DE   00 00 00 00               'L...".. ....
     lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
        in: struct lsa_SetInformationTrustedDomain
            trustdom_handle          : *
                trustdom_handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 9f14b6db-0e9f-4b53-8b0e-50dff6f223a7
            level                    : LSA_TRUSTED_DOMAIN_INFO_INFO_EX (6)
            info                     : *
                info                     : union lsa_TrustedDomainInfo(case 6)
                info_ex: struct lsa_TrustDomainInfoInfoEx
                    domain_name: struct lsa_StringLarge
                        length                   : 0x0012 (18)
                        size                     : 0x0014 (20)
                        string                   : *
                            string                   : 'ipa1.test'
                    netbios_name: struct lsa_StringLarge
                        length                   : 0x0008 (8)
                        size                     : 0x000a (10)
                        string                   : *
                            string                   : 'IPA1'
                    sid                      : *
                        sid                      : S-1-5-21-790702333-3825749031-3739951824
                    trust_direction          : 0x00000003 (3)
                           1: LSA_TRUST_DIRECTION_INBOUND
                           1: LSA_TRUST_DIRECTION_OUTBOUND
                    trust_type               : LSA_TRUST_TYPE_UPLEVEL (2)
                    trust_attributes         : 0x00000008 (8)
                           0: LSA_TRUST_ATTRIBUTE_NON_TRANSITIVE
                           0: LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY
                           0: LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
                           1: LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION
                           0: LSA_TRUST_ATTRIBUTE_WITHIN_FOREST
                           0: LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
                           0: LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION
                           0: LSA_TRUST_ATTRIBUTE_PIM_TRUST
                           0: LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATION_ENABLE_TGT_DELEGATION
rpc request data:
[0000] 00 00 00 00 DB B6 14 9F   9F 0E 53 4B 8B 0E 50 DF   ........ ..SK..P.
[0010] F6 F2 23 A7 06 00 06 00   12 00 14 00 00 00 02 00   ..#..... ........
[0020] 08 00 0A 00 04 00 02 00   08 00 02 00 03 00 00 00   ........ ........
[0030] 02 00 00 00 08 00 00 00   0A 00 00 00 00 00 00 00   ........ ........
[0040] 09 00 00 00 69 00 70 00   61 00 31 00 2E 00 74 00   ....i.p. a.1...t.
[0050] 65 00 73 00 74 00 00 00   05 00 00 00 00 00 00 00   e.s.t... ........
[0060] 04 00 00 00 49 00 50 00   41 00 31 00 04 00 00 00   ....I.P. A.1.....
[0070] 01 04 00 00 00 00 00 05   15 00 00 00 FD 28 21 2F   ........ .....(!/
[0080] 27 4C 08 E4 D0 22 EB DE                             'L..."..
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_SetInformationTrustedDomain: struct lsa_SetInformationTrustedDomain
        out: struct lsa_SetInformationTrustedDomain
            result                   : NT_STATUS_OK
rpc reply data:
[0000] 00 00 00 00                                         ....
     lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation
        in: struct lsa_lsaRSetForestTrustInformation
            handle                   : *
                handle: struct policy_handle
                    handle_type              : 0x00000000 (0)
                    uuid                     : 9f14b6db-0e9f-4b53-8b0e-50dff6f223a7
            trusted_domain_name      : *
                trusted_domain_name: struct lsa_StringLarge
                    length                   : 0x0012 (18)
                    size                     : 0x0014 (20)
                    string                   : *
                        string                   : 'ipa1.test'
            highest_record_type      : LSA_FOREST_TRUST_DOMAIN_INFO (2)
            forest_trust_info        : *
                forest_trust_info: struct lsa_ForestTrustInformation
                    count                    : 0x00000002 (2)
                    entries                  : *
                        entries: ARRAY(2)
                            entries                  : *
                                entries: struct lsa_ForestTrustRecord
                                    flags                    : 0x00000000 (0)
                                           0: LSA_TLN_DISABLED_NEW     
                                           0: LSA_TLN_DISABLED_ADMIN   
                                           0: LSA_TLN_DISABLED_CONFLICT
                                           0: LSA_SID_DISABLED_ADMIN   
                                           0: LSA_SID_DISABLED_CONFLICT
                                           0: LSA_NB_DISABLED_ADMIN    
                                           0: LSA_NB_DISABLED_CONFLICT 
                                    type                     : LSA_FOREST_TRUST_TOP_LEVEL_NAME (0)
                                    time                     : NTTIME(0)
                                    forest_trust_data        : union lsa_ForestTrustData(case 0)
                                    top_level_name: struct lsa_StringLarge
                                        length                   : 0x0012 (18)
                                        size                     : 0x0014 (20)
                                        string                   : *
                                            string                   : 'ipa1.test'
                            entries                  : *
                                entries: struct lsa_ForestTrustRecord
                                    flags                    : 0x00000000 (0)
                                           0: LSA_TLN_DISABLED_NEW     
                                           0: LSA_TLN_DISABLED_ADMIN   
                                           0: LSA_TLN_DISABLED_CONFLICT
                                           0: LSA_SID_DISABLED_ADMIN   
                                           0: LSA_SID_DISABLED_CONFLICT
                                           0: LSA_NB_DISABLED_ADMIN    
                                           0: LSA_NB_DISABLED_CONFLICT 
                                    type                     : LSA_FOREST_TRUST_DOMAIN_INFO (2)
                                    time                     : NTTIME(0)
                                    forest_trust_data        : union lsa_ForestTrustData(case 2)
                                    domain_info: struct lsa_ForestTrustDomainInfo
                                        domain_sid               : *
                                            domain_sid               : S-1-5-21-790702333-3825749031-3739951824
                                        dns_domain_name: struct lsa_StringLarge
                                            length                   : 0x0012 (18)
                                            size                     : 0x0014 (20)
                                            string                   : *
                                                string                   : 'ipa1.test'
                                        netbios_domain_name: struct lsa_StringLarge
                                            length                   : 0x0008 (8)
                                            size                     : 0x000a (10)
                                            string                   : *
                                                string                   : 'IPA1'
            check_only               : 0x00 (0)
rpc request data:
[0000] 00 00 00 00 DB B6 14 9F   9F 0E 53 4B 8B 0E 50 DF   ........ ..SK..P.
[0010] F6 F2 23 A7 12 00 14 00   00 00 02 00 0A 00 00 00   ..#..... ........
[0020] 00 00 00 00 09 00 00 00   69 00 70 00 61 00 31 00   ........ i.p.a.1.
[0030] 2E 00 74 00 65 00 73 00   74 00 02 00 02 00 00 00   ..t.e.s. t.......
[0040] 04 00 02 00 02 00 00 00   08 00 02 00 0C 00 02 00   ........ ........
[0050] 00 00 00 00 00 00 00 00   00 00 00 00 00 00 00 00   ........ ........
[0060] 00 00 00 00 12 00 14 00   10 00 02 00 0A 00 00 00   ........ ........
[0070] 00 00 00 00 09 00 00 00   69 00 70 00 61 00 31 00   ........ i.p.a.1.
[0080] 2E 00 74 00 65 00 73 00   74 00 00 00 00 00 00 00   ..t.e.s. t.......
[0090] 00 00 00 00 02 00 00 00   00 00 00 00 00 00 00 00   ........ ........
[00A0] 02 00 00 00 14 00 02 00   12 00 14 00 18 00 02 00   ........ ........
[00B0] 08 00 0A 00 1C 00 02 00   04 00 00 00 01 04 00 00   ........ ........
[00C0] 00 00 00 05 15 00 00 00   FD 28 21 2F 27 4C 08 E4   ........ .(!/'L..
[00D0] D0 22 EB DE 0A 00 00 00   00 00 00 00 09 00 00 00   ."...... ........
[00E0] 69 00 70 00 61 00 31 00   2E 00 74 00 65 00 73 00   i.p.a.1. ..t.e.s.
[00F0] 74 00 00 00 05 00 00 00   00 00 00 00 04 00 00 00   t....... ........
[0100] 49 00 50 00 41 00 31 00   00                        I.P.A.1. .
smb2_signing_encrypt_pdu: Encrypted SMB2 message
smb2_signing_decrypt_pdu: Decrypted SMB2 message
     lsa_lsaRSetForestTrustInformation: struct lsa_lsaRSetForestTrustInformation
        out: struct lsa_lsaRSetForestTrustInformation
            collision_info           : *
                collision_info           : NULL
            result                   : NT_STATUS_INVALID_HANDLE
rpc reply data:
[0000] 00 00 00 00 08 00 00 C0                             ........
[Wed Oct 25 07:14:28.451433 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] ipa: ERROR: non-public: NTSTATUSError: (3221225480, 'An invalid HANDLE was specified.')
[Wed Oct 25 07:14:28.451451 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] Traceback (most recent call last):
[Wed Oct 25 07:14:28.451456 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/rpcserver.py", line 407, in wsgi_execute
[Wed Oct 25 07:14:28.451462 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     result = command(*args, **options)
[Wed Oct 25 07:14:28.451468 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]              ^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451473 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipalib/frontend.py", line 471, in __call__
[Wed Oct 25 07:14:28.451479 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     return self.__do_call(*args, **options)
[Wed Oct 25 07:14:28.451484 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451489 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipalib/frontend.py", line 499, in __do_call
[Wed Oct 25 07:14:28.451495 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     ret = self.run(*args, **options)
[Wed Oct 25 07:14:28.451500 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]           ^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451506 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipalib/frontend.py", line 816, in run
[Wed Oct 25 07:14:28.451521 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     return self.execute(*args, **options)
[Wed Oct 25 07:14:28.451546 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451551 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/plugins/trust.py", line 765, in execute
[Wed Oct 25 07:14:28.451557 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     result = self.execute_ad(full_join, *keys, **options)
[Wed Oct 25 07:14:28.451562 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451568 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/plugins/trust.py", line 1021, in execute_ad
[Wed Oct 25 07:14:28.451573 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     result = self.trustinstance.join_ad_full_credentials(
[Wed Oct 25 07:14:28.451579 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451584 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/dcerpc.py", line 1877, in join_ad_full_credentials
[Wed Oct 25 07:14:28.451590 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     self.remote_domain.establish_trust(self.local_domain,
[Wed Oct 25 07:14:28.451595 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/dcerpc.py", line 1491, in establish_trust
[Wed Oct 25 07:14:28.451600 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     self.update_ftinfo(another_domain, handle=trustdom_handle)
[Wed Oct 25 07:14:28.451606 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]   File "/usr/lib/python3.12/site-packages/ipaserver/dcerpc.py", line 1350, in update_ftinfo
[Wed Oct 25 07:14:28.451611 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]     cinfo = self._pipe.lsaRSetForestTrustInformation(
[Wed Oct 25 07:14:28.451617 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178]             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
[Wed Oct 25 07:14:28.451622 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] samba.NTSTATUSError: (3221225480, 'An invalid HANDLE was specified.')
[Wed Oct 25 07:14:28.451793 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] ipa: INFO: [jsonserver_session] admin@IPA1.TEST: trust_add/1('win2022-hk9q.test', realm_admin='Administrator', realm_passwd='********', bidirectional=True, version='2.253'): InternalError
[Wed Oct 25 07:14:28.451837 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] ipa: DEBUG: [jsonserver_session] admin@IPA1.TEST: trust_add/1('win2022-hk9q.test', realm_admin='Administrator', realm_passwd='********', bidirectional=True, version='2.253'): InternalError etime=1460935986
[Wed Oct 25 07:14:28.452466 2023] [wsgi:error] [pid 27603:tid 27985] [remote 10.0.197.119:46178] ipa: DEBUG: Destroyed connection context.ldap2_140620957655760

Metadata Update from @abbra:
- Issue assigned to abbra

Metadata Update from @abbra:
- Issue set to the milestone: Global Catalog and IPA-IPA trust

Looks like there is an additional check now on Windows Server side and trustdom policy handle is not accepted anymore, only the generic policy handle. We fallback to the generic one if an empty (None) policy was passed to update_ftinfo. With this change I've got it working.

This only affects IPA-to-IPA trust code I have in my branch because for Samba we need to use the trustdom policy handle. ;)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.