status of unixsam and guest passdb backends?

[Andrew Bartlett]

On Mon, 2003-03-31 at 09:48, Andrew Bartlett wrote:
> On Mon, 2003-03-31 at 08:48, Gerald (Jerry) Carter wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Andrew,
> > 
> > I notice that the default for the passdb backend parameter has been 
> > changed in SAMBA_3_0/HEAD, but the man page has not been updated.
> > Since it was "passdb backend = .... unixsam" that was breaking 
> > 'smbpasswd -a', I'm wondering is unixsam even useful anymore?
> > Maybe for a clear text password server....
> 
> Unixsam was a useful hack and a bad idea.  Most of what it was trying to
> do it couldn't really do, and will be replaced by idmap.  I had wanted
> all rid->uid translations to go via the passdb.  However, we still have
> to map uid->rid for 'non-existant' accounts, so the fallback code never
> got removed, and having unixsam just confused things (particularly when
> we were running winbindd too).
> 
> It also broke a pile of conventions about the relationship between unix
> and Samba accounts, as you correctly note.

Guestsam is in there to provide the only useful thing unixsam did -
ensuring that the guest account really was the guest, and had the guest
RID.  It also helped with some Win2k behavior that assumed the presence
of the guest account.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030331/8760a5c0/attachment.bin