CVS update: samba/source/smbd

Andrew Bartlett abartlet at pcug.org.au
Sat Nov 3 14:07:16 EST 2001


Jeremy Allison wrote:
> 
> Date:   Fri Nov  2 18:00:49 2001
> Author: jra
> 
> Update of /data/cvs/samba/source/smbd
> In directory va:/tmp/cvs-serv27527/smbd
> 
> Modified Files:
>       Tag: SAMBA_2_2
>         password.c reply.c uid.c
> Log Message:
> Added extra group info into 2.2.3.
> Jeremy.

Is this the right way to do things?  What happens if the remote group
can't be represented as a local gid_t?

I think we should do it both ways:  Use the local groups where they are
available (becouse there may well be local file premissions associated
with them) but also store them in the NT_USER_TOKEN no matter what -
becouse many sites run security=domain but without winbind, and they
will still have this problem.

Other than that, I'm looking into various ways that samba could without
local users of any description, where we have a VFS based on an SQL
database for example, or where we simply map everybody to a guest
account.  

In working towards this HEAD we now supports machine accounts and domain
logons without any reference to local users - hence why I'm quesioning
any further relience on them for things like this.  (Support for this is
currently read-only, samba can use them if you figure a way to put them
into the passdb in the first place :-)

Andrew Bartlett
-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Samba Team member, Build Farm maintainer        abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net




More information about the samba-cvs mailing list