idmap api

[Andrew Bartlett]

"Stefan (metze) Metzmacher" wrote:
> 
> Hi,
> 
> here's a proposal for the idmap api;
> 
> we'll have a cache that will be asked first, if this fails we ask the
> central idmap and add the result to our cache.
> 
> the idmap_central_* functions should be plugable/selectable (different
> backends should be allowed here)
> 
> and the backend should decide how to handle unmapped id's.
> 
> comments please
> 
> /* idmap api */
> NT_STATUS idmap_sid_to_id(DOM_SID *sid, int *id, BOOL *group);

I don't like this bit.  I would prefer it returned somthing that was
typesafe - say use two paramaters or return a struct or somthing.  The
size of a uid_t is probably the same as a gid_t, but may not be the same
as int.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net