How samba 3.0 get the NT token for a domain user?
aliguor at us.ibm.com
Fri May 9 18:59:55 GMT 2003
We just figured out the format of the authorization data and are still
experimenting with it. Right now you can find the routines in
Linux/Active Directory Interoperability
Linux Technology Center (LTC) - IBM Austin
E-mail: aliguor at us.ibm.com
Phone: (512) 838-1208
Tie Line: 678-1208
Chere Zhou <qzhou at isilon.com>
Sent by: samba-technical-bounces+aliguor=us.ibm.com at lists.samba.org
05/09/2003 01:17 PM
Please respond to qzhou
To: lukeh at PADL.COM
cc: samba-technical at lists.samba.org
Subject: Re: How samba 3.0 get the NT token for a domain user?
Why doesn't samba use the decoded SIDs? Sounds strange to me.
Can you point me to the functions that does the decoding of the SIDs? I
curious to have a look at it.
On Thursday 08 May 2003 05:36 pm, Luke Howard wrote:
> >So if my understanding above is correct, it means that we can not
> > the access token yet? Or what else that we do not get the group list
> > from the access token? Or my understanding of the process is totally
> > wrong?
> The token is included in the authorization data in the Kerberos ticket.
> present SAMBA decodes the authorization data but does not use the SIDs
> within it.
> -- Luke
More information about the samba-technical