Q about svn r20243

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:

> ok.  So let me ask this.  I understand that you wanted to be able to
> to be able to look up both the unix and ntgroup names in the group
> mapping tables.  But I'm pretty sure that we decided not to do
> this in the 3.0.23 changes and just require the mapped named
> in things like "valid users".

btw...I remember how we worked around this in 3.0.23.
We added the S-1-22-2-XX SIDs for all gis to the user's token
(thinking pf a Samba PDC here with a mapped ntadmins -> "Domain Admins"
group).  valid users = +ntadmins would still work because
we added S-1-22-2-XX and S-1-5-21-xxx-512 to the user's token
based on membership in the htadmins group.



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGVy31IR7qMdg1EfYRAuijAJ41BY9FLX8KO82gxK2PRfOmJX2FzACgvvbz
ixhn5/6bwJ4349+5tJIbKFc=
=CSxo
-----END PGP SIGNATURE-----