CVS update: samba/source/nsswitch

Gerald (Jerry) Carter jerry at samba.org
Mon Jun 23 02:01:30 GMT 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 22 Jun 2003, Andrew Bartlett wrote:

> Yes, but 3.0 does ADS connections - those servers won't be affected by a
> negative netbios name cache.  (And yes, I've seen that code improving
> very nicely over the last little bit).

we have a winbindd_domain* that stores the last NTSTATUS returned.
If the server is down, then this can just be set to 
NT_STATUS_SERVER_DISABLED.  We can just modify the ads code to store 
NT_STATUS_SERVER_DISABLED in the domain structure instead of relying on 
the sequence number being set to DOM_SEQUENCE_NONE.  That's trivial.

However, there is no place that checks for a return code of 
NT_STATUS_SERVER_DISABLED.  So I really fail to see the difference
in returning NT_STATUS_ACCESS_DENIED or NT_STATUS_SERVER_DISABLED.

> > This code has been running well for several months now through a barrage 
> > of failover test.
> 
> Including ADS failover?

Have you run the new code?  Or are you just asking theoretical questions?
The code was effectively a rename of the uni_group cache + storing
return codes in the winbindd_domain* structure.  Give me a specific
thing that broke and I'll fix it.

> Just watch out, we can mix the RPC backend with kerberos logins under
> some strange situations.

Again, do you have a specific comment?  Or just a be careful?





ciao, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "You can never go home again, Oatman, but I guess you can shop there."  
                            --John Cusack - "Grosse Point Blank" (1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE+9l9+IR7qMdg1EfYRAuqfAKCaJYn2PtxGYNLYS3Rwt5GJyKRADACgqGSn
A4BQ5aNZM6IS/vOq9iTDKjs=
=uZgw
-----END PGP SIGNATURE-----




More information about the samba-technical mailing list