libsmbclient: Browsing and a URI spec?

[Kevin Colby]

Steve Langasek wrote:
> 
> There's no way for you to tell an SMB server "I have these credentials
> Y\Z, you can verify them against server X."  The server has to KNOW,
> based on trust relationships and/or server configuration, how to verify
> those credentials.

Yes.  The client cannot dictate who the DCs for a given domain are.
That is for the DCs to resolve amongst themselves.

Welsh, Armand wrote:
>
> So the question is, I think, should samba support participating in
> workgoup lookps for multiple workgroups, and be able to be registerd
> in an authentication domain that is seperate from it's workgroups?

I think everyone may be approaching this backward.  For Samba, your
workgroup is your domain.  I know that has been said before, but the
issue here may not be that you need an additional way of specifying
an "authentication domain".  That functionality is handled by what has
previously been referred to as the "workgroup" parameter.

The issue here seems to me to be that the client may not want to _browse_
that workgroup/domain (the authenticated and/or joined "workgroup"), but
rather use a different default browsing workgroup.  Perhaps approaching
the matter that way makes more sense.  You could then have clients
default to browsing the smaller, trusting domain, but authenticate to
the master domain--the same one Samba (as a server) joined and is
mentioned in smb.conf.  This could be accomplished by using the existing
configuration and adding a "browse = <default workgroup clients browse>"
parameter, or something like that.

Does this make sense?

	- Kevin Colby
	  kevinc at grainsystems.com