Modifying winbind to work over TCP socket - questions

[Richard Sharpe]

On Thu, 20 Jun 2002, Nir Soffer wrote:

> 
> Hello!
> 
> I want to get winbind to work over TCP sockets instead of a UNIX domain
> socket (so I could run winbindd on one machine and avoid running it on 
> several machines in a cluster).

Hmmm, you know that security info goes over this connection ...

However, we have done this ... It is relatively simple ...
 
> I've got several questions -
> 
> I've already modified winbindd.c to accept another command line option
> so it would listen to a TCP socket. I'm now having trouble dealing with
> the client aspect.
> 
> Would modifying wb_common.c to read a configuration file for
> configuration details be prudent? Wouldn't that mean that every time I
> use a get*ent call the configuration file would be open()'d and then
> close()'d?

Here's what we do ...

#if WINBIND_USE_PIPE

        /* Create UNIX domain socket */
        
        if ((accept_sock = create_sock()) == -1) {

#else
        /* Create tcp/ip socket */
        
        if ((accept_sock = create_sock_inet()) == -1) {

#endif

That is in winbindd. This could clearly be done on a command line flag ...

This is what we do in wbcommon.c ... This requires more work if you want 
to choose your poison.

#ifdef WINBIND_USE_PIPE
        if (winbind_open_pipe_sock() == -1) {
#else
        if (open_inet_sock() == -1) {
#endif


> Or perhaps I should put it in there as a compile time option? Or maybe
> create a new service that would run as a winbind client and have the NSS
> connect to the client process using a UNIX domain socket?
> 
> Any ideas you might have will be appreciated :)
> Ofcourse - I'll be more than happy to send patches back if anyone wants
> them.
> 
> On another note - I've modified smbd to accept connections on a tcp port
> and then close them automatically without a fork - for an inhouse
> heartbeat mechanism (We didn't want smbd to fork every 5 seconds when we
> queried it). Is there any demand in the community for such modifications
> to be released back?

What's wrong with one fork every now and then?

> Thanks!
> Nir.
> 
> --
> Nir Soffer -=- Software Engineer, Exanet Inc. -=-
> "Father, why are all the children weeping? / They are merely crying son
>  O, are they merely crying, father? / Yes, true weeping is yet to come"
>         -- Nick Cave and the Bad Seeds, The Weeping Song
>  
> 

-- 
Regards
-----
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, 
sharpe at ethereal.com