VFS Implementation and user authentication
peter at cadcamlab.org
Fri Sep 8 09:57:49 GMT 2000
[Tim Potter <tpot at linuxcare.com.au>]
> I'm thinking that there does need to be a generic authorisation
> interface - perhaps something similar to PAM? I don't know whether
> it should be part of the VFS or a separate interface. The current
> security = domain|user|share interface could be rewritten with this
> api to check it all hangs together properly.
Yeah, note that Samba already *has* an auth switch -- it just isn't
exposed as a .so interface like your vfs. A separate public interface
for the auth switch (sharing code with vfs for things like dlopen
portability glue, etc) would be a Good Thing. I like the idea of being
able to modularize existing Samba bits like passdb/*, compiling them
static or dynamic at will, like you can with Apache or Perl modules.
More information about the samba-technical