lsarpcd

Luke Kenneth Casson Leighton lkcl at samba.org
Sun Dec 12 21:22:42 GMT 1999


ok.

lsarpcd does not need to access the smb password database API, at all.
lsarpcd is a _redirector_.

NT 4.0's implementation of \PIPE\lsarpc will redirect to either a SAM or a
Netware NDS, depending on how the box is configured.

NT 5.0's implementation of \PIPE\lsarpc will redirect to either a SAM, an
ldap database or a Netware NDS, depending on how the box is configured.

for SIDs and names _outside_ of the responsibility of the local box, a
recursive lookup is used.

i therefore intend to rewrite lsarpc's lookupnames and lookupsids calls to
do exactly this: make recursive lookups to remote servers; use the Samr
client-side MSRPC api to lookup local server accounts; and then merge the
results.

this means that lsarpcd does not need to have passdb/*.c, passgrp/*.c etc
linked in to it.

it also means, because lookupnames and lookupsids can be propagated /
redirected, that NIS-nuke now takes on new proportions if you set up
multiple samba servers in a NIS-based unix environment...

cool :)



More information about the samba-technical mailing list