Retrieving user groups using Samba

Venugopal Managoli mvenu at
Fri Sep 7 08:12:04 GMT 2001

Dear Samba Gurus

We are trying to perform Authentication/authorization of user, Retrieval of 
user and user's groups. In the article on Samba, it is mentioned that once 
the user is authenticated, as part of the response from Domain Controller to 
Samba server, group sid(s) are included.

Reference -

Doing the NIS/NT Samba
A look at the new Windows NT domain security features in Samba 2.0
- By Jeremy Allison

And finally, acting in the same manner as an NT server authenticating to a 
PDC means that as part of the authentication reply, the Samba server gets 
the user identification information such as the user SID, the list of NT 
groups the user belongs to, etc.

Now, the question is how to unmarshall group sid(s) from response. It seems 
like groups sid(s) are embedded in the "security blob". Please let us know 
how to retrieve these groups sid(s) from the response. Is there any Java 
implementation for the same ?

Any help in this matter is greatly appreciated...


- Venu

Get your FREE download of MSN Explorer at

More information about the samba-technical mailing list