How samba 3.0 get the NT token for a domain user?

Chere Zhou qzhou at
Fri May 9 18:17:10 GMT 2003

Why doesn't samba use the decoded SIDs?  Sounds strange to me.  

Can you point me to the functions that does the decoding of the SIDs?  I am 
curious to have a look at it.


On Thursday 08 May 2003 05:36 pm, Luke Howard wrote:
> >So if my understanding above is correct, it means that we can not decode
> > the access token yet?  Or what else that we do not get the group list
> > from the access token?  Or my understanding of the process is totally
> > wrong?
> The token is included in the authorization data in the Kerberos ticket. At
> present SAMBA decodes the authorization data but does not use the SIDs
> within it.
> -- Luke

More information about the samba-technical mailing list