passdb lookups directly in winbindd? [was Re: winbind on PDC
for trusted domains]
abartlet at samba.org
Sun Jun 29 01:56:51 GMT 2003
On Sun, 2003-06-29 at 05:02, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> On Sat, 28 Jun 2003, Gerald (Jerry) Carter wrote:
> > > We are already heading for this - winbind has a passdb backend already
> > > (not operational), and it is intended that winbind should provide these
> > > services for direct NT migrations.
> > >
> > > (Ie, you suck down an NT PDC into passdb, and winbind handles the rest).
> > >
> > > I agree that it seems to be feature creep - if we really do feel that
> > > way, then creating a seperate 'samba-authd' might be appropriate.
> > > However, given the circumstances I think it's suitable.
> btw...do we really need WINBIND_PAM_CONTACT_TRUSTDOM as a flag for testing
> whether we deal with trusted users. I don't see any real value in being
> able to set "allow trusted domains = no" on a per call basis. Can you
> give me an example of when it would be useful? Thanks. Or even better,
> add a comment in the code about it next time.
As I mentioned to vl on his patch, it serves no useful purpose and may
safely be removed. The design it was intended to support has the same
deadlock problem we are trying to avoid here, and gained very little for
Andrew Bartlett <abartlet at bartlett.house>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030629/56b4cd3a/attachment.bin
More information about the samba-technical