VFS Implementation and user authentication

[Brad Sahr]

I think it would be *fantastic* to see --with-vfs in the next release of
Samba.

While there's been some discussion about releasing VFS as a feature, my hope
was to address the issue of authentication and the VFS. David Collier-Brown
mentioned that Sun and Linux don't have authentication in their VFS. Tim
Potter thought that Samba could utilize a generic authorisation
interface.

I like the idea of the generic authorisation interface. When might something
along these lines be developed? I'm assuming there are no plans for this at
the current time.

In the mean time, I must pass username and password to a third party for
authentication/authorisation. Would someone be able to enlighten me as to
how I might modify Samba to pass the user's password up to the VFS?

Thanks for any help on this,

Brad

> -----Original Message-----
> From: samba-technical-admin at us4.samba.org
> [mailto:samba-technical-admin at us4.samba.org]On Behalf Of Jeremy Allison
> Sent: Thursday, September 07, 2000 10:14 AM
> To: David Lee
> Cc: Andrew Tridgell; bsahr at macromedia.com; samba-technical at samba.org
> Subject: Re: VFS Implementation and user authentication
>
>
> David Lee wrote:
> >
> > Isn't this largely what the "--with-XYZ" functionality is all about?
> >
> > My own experience with the recent (2.0.7) "utmp" stuff indicated that
> > although a few enthusiasts picked it up before release, it was
> only after
> > release that many others came across it and helped further improve it.
> > This was done as "--with-utmp", and warnings about
> "experimental" etc., to
> > protect the main Samba code, whilst allowing typical non-CVS, end-user
> > administrators, presumably the big majority of us, _easily_ to opt in if
> > they so choose.
> >
> > Yes, I agree with Jeremy's caution about stability before release.
> >
> > But I also agree with Andrew's thought that it needs to be shipped.
> >
> > Could it be wrapped inside a "--with-vfs" option, accompanied
> by suitable
> > warnings?
>
> Yeah, that works better for me. That way I can break everyone's
> vfs modules in a later release and not feel too guilty :-).
>
> Ok - I'm for the --with-vfs option (I'll see how fast I can
> add this).
>
> Jeremy.
>
>
> --------------------------------------------------------
> Buying an operating system without source is like buying
> a self-assembly Space Shuttle with no instructions.
> --------------------------------------------------------
>