SYSKEY, TNG freeze, 2.0.x->TNG merge and other thoughts

Luke Kenneth Casson Leighton lkcl at
Thu Feb 10 07:43:57 GMT 2000

> Yes, and there are reasons why HKLM\SAM is NOT a directory with up to 100
> 000 files in it - even Macrosoft code isn't THAT inefficient (usually).
> It's a file (registry hive), with access control implemented by the only
> process allowed to access it.

bad example to pick.

1) the SAM is loaded into memfrom what i can tell, at start-up time.  i
may be wrong about this.

2) the registry is implemented at the kernel level, for "speed"
optimisations.  this results in me being able to modify rpcclient and take
out an NT box with a blue-screen if i have an "authenticated user" SMB
connection (guest, user, admin but not anon-connect).

More information about the samba-technical mailing list