winbind and NSS

[Steve Langasek]

On Tue, Nov 26, 2002 at 01:43:44PM -0800, Arup Biswas wrote:
> I am interested in using winbind for mapping users and
> groups across unix and windows domains.
> To achieve this samba documentation specifies the
> following entries in the nsswitch.conf
> 
> passwd: files(nis)	winbind
> groups:  files(nis)	winbind

> My understanding of the smbd code is that getpwnam()
> is the only nss call that is really used in the
> context of mapping users/groups. My question is what
> is the basic minimal set of nss calls that I need to
> support in order to achieve user/group mapping. 

> Here is why I am considering supporting only the
> minimal set of nss calls: we are using a platform
> where nss is not supported and the less number of
> calls we need to "nss-enable" the less work for us. We
> can keep the other password/group access calls
> nss-disabled.

getpwnam
getpwnam_r
getpwuid
getpwuid_r
getpwent (optional)
getgrnam
getgrnam_r
getgrgid
getgrgid_r
getgrent (optional)

Those are the main calls.  Depending on how the system is implemented,
you may need to consider other NSS calls for the backend to the
initgroups() function, but otherwise, that pretty much covers everything
you'd need to do with NSS for users and groups.

-- 
Steve Langasek
postmodern programmer
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20021126/db0ea779/attachment.bin