CVS update: samba/source/auth

Jean Francois Micouleau Jean-Francois.Micouleau at
Sun Jun 29 15:21:04 GMT 2003

On 29 Jun 2003, Simo Sorce wrote:

> > Like I said before, I don't ever want winbind accessing passdb
> > information directly.  It's not what winbind is there for.
> >
> > If I'm wrong, then convince me of a real situation where
> > (a) you would want to do this, and (b) there is no other way
> > to solve the problem other than having winbind do passdb lookups.
> A PDC that want to use the samba passdb as the authoritative source of
> user/group information without using LDAP.
> nss_winbindd has the great advantage that it can be tweeked to in facts
> support global groups into local groups as a real PDC do.
> That thing cannot be done with nss_ldap.
> so if nss_winbind can access the passdb then it would be great.
> the esaiest way is to do it through winbind
> I'm open to other solutions, if any, as well.

another solution was to have winbind send a samba specific flag in the
SAMR query, and the smbd SAMR server code would check that flag before
looking up UNIX security.

I don't remember with who, I talked of that solution (maybe tridge or


More information about the samba-technical mailing list