Multiple passdb backends

Jean Francois Micouleau Jean-Francois.Micouleau at dalalu.fr
Thu Feb 28 14:51:18 GMT 2002


On Thu, 28 Feb 2002, Andrew Bartlett wrote:

> Simo Sorce wrote:
> >
> > On Wed, 2002-02-27 at 18:34, Jelmer Vernooij wrote:
> > > Hello,
> > >
> > > Samba currently supports only one passdb backend at a time. It would
> > > be nice to be able to load multiple backends, just like nsswitch and
> > > pam. When multiple backends are supported, it would be possible to
> > > (just some examples):
> > >
> > > - use users from a ldap database and a mysql database
> > > - use a global ldap database and use a 'local' smbpasswd database
> > > - use two mysql databases (on two servers, for example)
> > >
> > > feedback, please :)
> >
> > yes we already talked about that, more desin is needed!
>
> I originally opposed this, but I'm beginning to think its quite
> feasable.  The way it would work is to do searches on all databases,
> returning the first match.  Likewise enumerations are on a global
> basis.  Each SAM_ACCOUNT returned should include an opaque reference to
> the passdb it was sourced from - that way you know how to update the
> right DB on the way back.

no opaque thingy, opaque is bad, opaque is evil.

add an ops field to the SAM_ACCOUNT struct with ptrs to the SAM backend
functions.


  The only catch is adding users, and in that
> case you just add them to the first - and let the admin decide the
> order.

yes.

	J.F.






More information about the samba-technical mailing list