funky LsaQueryInfo change

[Cole, Timothy D.]

> -----Original Message-----
> From:	Luke Kenneth Casson Leighton [SMTP:lkcl at samba.org]
> Sent:	Friday, July 21, 2000 15:28
> To:	Cole, Timothy D.
> Cc:	samba-technical at samba.org
> Subject:	RE: funky LsaQueryInfo change
> 
> On Fri, 21 Jul 2000, Cole, Timothy D. wrote:
> 
> > Actually, I should be more clear:  TNG and HEAD may be correct, but
> > SAMBA_2_0 is not -- NT member servers and Samba 2.0.5 all seem to reply
> with
> > the workgroup, whereas 2.0.7 (member server or no) will return the
> workgroup
> > and global SAM SID iff "domain logons" are turned on.
> > 
> > [ from another message: ]
> > 
> > it should be 0x5 a response with no data [indicating "i
> > am not a member of any domain", i.e. ROLESTANDALONE].
> > 
> > So, we need to fix this, then.  "domain logons" does not really seem to
> be
> > the appropriate thing to check here, and it's returning the wrong reply
> > anyway.
> > 
> > What exactly should the 2_0 behavior be,
> 
> exactly the same as in TNG.
> 
	... which is? (i.e. what are the expected responses to LsaQueryInfo
@ level 0x03 for each of the roles?)

> > and what relationship does "domain logons" have to roles in TNG/HEAD?
> 
> lp_role_server() is hard-coded up to combine lp_security(),
> lp_passwordserver(), lp_domain_logons() and lp_domain_master() to give
> some semblance of logic to a wacky number of historically-developed
> parameters.
> 
> ROLE_BDC is returned when lp_domain_logons() is True but
> lp_domain_master() is False, for example.
> 
	Ah.  None of them map to lp_domain_logins() directly, then.

> see param/loadparm.c
> 
	Erm, I don't have CVS access here, thanks to Mr. Firewall.  Or are
there snapshot tarballs up on the site that I'm not aware of?

> ... i *think* that matty coded up srv_lsa.c in main, but he avoided using
> lp_role_server() if memory serves correct, going for same-functionality.