[Samba] domain local groups in winbindd

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 14 Dec 2002, Guenther Deschner wrote:

> but my question was: why are domain local groups only supported in
> native win2k-domains and not in mixed-mode domains?

Cause this is how Windows does it.

> if i just comment out some native-mode checks in winbind i do see all
> the domain local groups properly as well in my mixed-mode domain.
> apparently this works. maybe there some technical reasons why the
> authors disabled domain local groups in mixed-mode win2k domains that i
> just don't see right now?

That was my code.  It works based on the Windows documentation and 
behavior that I observed.  If you use domain local groups of a server in a 
mixed mode domain, I have no idea how the Winows clients accessing shares 
on that server will react.  My gut feelnig is that you will see some
unresolved SIDs, but I could be wrong.




cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2         "SAMS Teach Yourself Samba in 24 Hours" 2ed
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9/TgBIR7qMdg1EfYRAgw0AKC91wqSeRTSJuya54GODRP31em9sgCg6Hcn
T2kJ7aedXyVFwG7cgMHhsiE=
=dEFz
-----END PGP SIGNATURE-----