funky LsaQueryInfo change
Cole, Timothy D.
timothy_d_cole at md.northgrum.com
Fri Jul 21 19:45:42 GMT 2000
> -----Original Message-----
> From: Luke Kenneth Casson Leighton [SMTP:lkcl at samba.org]
> Sent: Friday, July 21, 2000 15:28
> To: Cole, Timothy D.
> Cc: samba-technical at samba.org
> Subject: RE: funky LsaQueryInfo change
> On Fri, 21 Jul 2000, Cole, Timothy D. wrote:
> > Actually, I should be more clear: TNG and HEAD may be correct, but
> > SAMBA_2_0 is not -- NT member servers and Samba 2.0.5 all seem to reply
> > the workgroup, whereas 2.0.7 (member server or no) will return the
> > and global SAM SID iff "domain logons" are turned on.
> > [ from another message: ]
> > it should be 0x5 a response with no data [indicating "i
> > am not a member of any domain", i.e. ROLESTANDALONE].
> > So, we need to fix this, then. "domain logons" does not really seem to
> > the appropriate thing to check here, and it's returning the wrong reply
> > anyway.
> > What exactly should the 2_0 behavior be,
> exactly the same as in TNG.
... which is? (i.e. what are the expected responses to LsaQueryInfo
@ level 0x03 for each of the roles?)
> > and what relationship does "domain logons" have to roles in TNG/HEAD?
> lp_role_server() is hard-coded up to combine lp_security(),
> lp_passwordserver(), lp_domain_logons() and lp_domain_master() to give
> some semblance of logic to a wacky number of historically-developed
> ROLE_BDC is returned when lp_domain_logons() is True but
> lp_domain_master() is False, for example.
Ah. None of them map to lp_domain_logins() directly, then.
> see param/loadparm.c
Erm, I don't have CVS access here, thanks to Mr. Firewall. Or are
there snapshot tarballs up on the site that I'm not aware of?
> ... i *think* that matty coded up srv_lsa.c in main, but he avoided using
> lp_role_server() if memory serves correct, going for same-functionality.
More information about the samba-technical