"net groupfilter" ?
Gerald (Jerry) Carter
jerry at samba.org
Tue Dec 16 14:55:06 GMT 2008
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Volker Lendecke wrote:
> On Tue, Dec 16, 2008 at 08:03:38AM -0600, Gerald (Jerry) Carter wrote:
>> If I understand this properly, the the case this is trying
>> to solve is Winbind joined to a Windows domain and using an
>> automatic idmap backend like tdb correct? Because something
>> like idmap_ad[ex] already does filtering server side based on
>> the assigned gid in AD.
>>
>> This patch performs client side filtering so that the admin
>> doesn't have to manually manage the gid assignments centrally.
>
> Correct.
>
> Volker
So then Winbind would only assign gids to groups defined in
the filter? If that is the case, then I don't think the changes
to auth.c are necessary.
cheers, jerry
- --
=====================================================================
Samba ------- http://www.samba.org
Likewise Software --------- http://www.likewisesoftware.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFJR8FKIR7qMdg1EfYRAsFzAKDFRdpuXt3c7wjvrRDW7HmjNoVjNACcDGaV
wxKAXglsv4MA2zXNVoErKRc=
=DKrr
-----END PGP SIGNATURE-----
More information about the samba-technical
mailing list