New group mapping and the auth subsystem

[Jean Francois Micouleau]

On Sun, 2 Dec 2001, Jeremy Allison wrote:

> > But how do you (on a member server) get the list of sids that a user
> > has?  In particular, how do we do this if we don't have winbind?
>
> You can't get the list of SIDs for an "arbitrary" user, they
> need to have logged on via netlogon or PAC. Then we know what
> SIDs they have (from the return value) and we store it in the
> token.

you can get the list of SIDs of an arbitrary user !

you should even been able to log as a user, and call impersonate_user() on
another user with a different token !

> I understand where JF is coming from....

I come from France ;-)

	J.F.