svn commit: samba r2934 - in branches/SAMBA_4_0/source:ntvfs/unixuid script

[Simo Sorce]

On Tue, 2004-10-12 at 16:06, Stefan (metze) Metzmacher wrote:
> > On Tue, 2004-10-12 at 13:30, tridge at samba.org wrote:
> >
> >> - added SID_WORLD and SID_NETWORK to the foreign sids in the
> >>   provisioning, as these are auto-added to the nt_user_token (why is
> >>   that done? Andrew?)
> >
> > I think SID_NETWORK is added to be able to deny access by distinguishing
> > local users from network users.
> > No idea about SID_WORLD right now out of my head.
> 
> 
> every security token in windows has the S-1-1-0 (World) SID attached
> there's also a logon SID which we currently don't have.
> (S-1-5-5-0-<logonsession_rid>) and maybe some other s-1-5-* SID's
> 
> S-1-5-11 Authenticated User
> ...

Sure, bu the question was: why ? :-)

I know the reason of authenticated user, network, and logon, but what
does the SID_WORLD mean? what is it used for ?

Simo.

-- 
Simo Sorce    -  idra at samba.org
Samba Team    -  http://www.samba.org
Italian Site  -  http://samba.xsec.it