CVS update: samba/source/smbd

[Luke Kenneth Casson Leighton]

On Thu, 8 Apr 1999 jra at samba.anu.edu.au wrote:

> 
> Date:	Thursday April 8, 1999 @ 6:00
> Author:	jra
> 
> Update of /data/cvs/samba/source/smbd
> In directory samba:/tmp/cvs-serv25392/smbd
> 
> Modified Files:
>       Tag: SAMBA_2_0
> 	nttrans.c 
> Log Message:
> Fixed a couple of bugs in displaying a UNIX permission as an NT
> ACL. Firstly, UNIX groups should be returned as SID_NAME_ALIAS
> not SID_NAME_DOM_GRP. Secondly I was mapping the group entry of

not quite, jeremy.

if you are a domain member, then yes: everything is returned as
SID_NAME_ALIAS but that's only because you cannot add SID_NAME_DOM_GRPs to
a local SAM database.

if you are a PDC then you can add what you like.  or, more like: you have
to ask the PDC what the SID_NAME_* type is, even if that's on loop-back.

it would be best to use lsa_lookup_sids() and lsa_lookup_names even on
loop-back and let rpc_server/rpc_lsa.c resolve this one.  oh, once you've
done a unix name -> nt name mapping.

> a UNIX permission to a user rid, not a group rid (that was just
> dumb :-). Now the full permissions are seen correctly.

i ended up with this mistake in cvs main.  to fix it you have to ensure
that the user uid and group gid space is separate.  i don't know what to
do about this..

> Jeremy.
> 
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton  </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://samba.org"        > Samba Web site                </a>

=====================================================================
Luke Kenneth Casson Leighton        |  Direct Dial   : (678) 443-6183
Systems Engineer / ISS XForce Team  |  ISS Front Desk: (678) 443-6000
Internet Security Systems, Inc.     |  ISS Fax       : (678) 443-6477

http://www.iss.net/    *Adaptive Network Security for the Enterprise*
     ISS Connect   -   International User Conference   -  May '99
=====================================================================