VFS Implementation and user authentication

[Peter Samuelson]

[Tim Potter <tpot at linuxcare.com.au>]
> I'm thinking that there does need to be a generic authorisation
> interface - perhaps something similar to PAM?  I don't know whether
> it should be part of the VFS or a separate interface.  The current
> security = domain|user|share interface could be rewritten with this
> api to check it all hangs together properly.

Yeah, note that Samba already *has* an auth switch -- it just isn't
exposed as a .so interface like your vfs.  A separate public interface
for the auth switch (sharing code with vfs for things like dlopen
portability glue, etc) would be a Good Thing.  I like the idea of being
able to modularize existing Samba bits like passdb/*, compiling them
static or dynamic at will, like you can with Apache or Perl modules.

Peter