LookupAccountSid&LookupAccount (fwd)

Luke Kenneth Casson Leighton lkcl at switchboard.net
Mon Jun 1 17:29:10 GMT 1998


On Mon, 1 Jun 1998, Jeremy Allison wrote:

> Luke Kenneth Casson Leighton wrote:
> > 
> > > The lookup needs to be simple and fast,
> > 
> > or not at all.  do you consider this to be a viable option, given that
> > LsaLookupNames is not a commonly carried out function?
> 
> It's not LsaLookupNames I care about. It's getting an
> ACL with SIDs in it and mapping it to a set of unix
> uids/gids on the fly in a filesystem call. Also it's
> mapping uids/gids in the unix permission matrix back
> to an ACL,

you mean from a uid to a RID (which happens to be stored in an ACL).

> This *does* have to be fast.

ok, how about having our own ACL-structure which has a uid+userRid tuple
and a gid+groupRID tuple stored?

the lookup can be user-interface-slow, then.

luke



More information about the samba-technical mailing list