FW: Speed comp. TNG & 2.2.alpha (fwd)

Peter Samuelson peter at cadcamlab.org
Wed Feb 28 02:16:11 GMT 2001


[Steve Langasek]
> Just a thought (one with no experimental backing), but would it be
> possible by default to find namespace collisions (resolve the rid to
> a gid, getgrgid(gid), get the name, getpwnam(group_name), tag as a
> collision)

This whole thing needs caching -- the above sounds like a lot of
overhead.

> and mangle them by appending a non-printable character to the group
> name returned?

Hmmm, interesting thought.  The above is a way of "tricking" the NT
end-user into thinking the user and group are equivalent, while not
tricking the system -- and as such its efficacy depends on the
like-named user and group actually being semantically equivalent, for
human purposes.

I think I sort of like Andrew's proposal better -- ignore the duplicate
group names entirely w/r/t sending and receiving security descriptor
information.  (NT doesn't require it, since unlike Unix it doesn't
assume that every file has a group.)  If the client wants to change the
ACL of a file to have no groups in it, you can use the default
nobody-group ('nogroup' on my Linux box).

Peter




More information about the samba-ntdom mailing list