[PATCH] winbind id assignment module

[Andrew Bartlett]

Mike Gerdts wrote:
> 
> I have created a nearly new implementation of the winbindd uid/gid
> assignment plugin that I first released about a week ago[1].  You can
> get the latest patch and sample module at
> http://www.cae.wisc.edu/~gerdts/samba/.

I'm not sure how closely I looked at the last one, but this looks
HORRID!

There is simply too much code here.  The problem space is simple, make a
simple solution.

Start by just doing a uid allocator.  This allocator can do its own
'sid->name' call internally if it helps implementation, as long as it
can work without that.  The concequeces
of the DC being down should be considered however.  (Possibly take a
dump at regular intervals).

This should be a simple if statement in the existing winbind uid
allocation code.

The issue of 'is this a winbind uid/gid' are easily solved by adding a
request that asks specificly that to the winbind deamon.  This should be
configured by an smb.conf paramter, that will allow winbind to return
UID's found in (for example) the SFU ADS schema, or a unix LDAP server
etc.  

For now, don't worry about the cost of doing a socket call.  Try and
generate the smallest possible patch that fixes your problem.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net