svn commit: samba r264 - in branches/tmp/VOYAGER/source: groupdb include libsmb nsswitch passdb smbd

[Simo Sorce]

The real question was: why do winbindd need to call smbd? (I suppose it
is through rpc). Winbindd can have direct access to all informations it
needs.

Simo.

On Sun, 2004-04-18 at 22:01, Volker Lendecke wrote:
> On Sun, Apr 18, 2004 at 08:31:50PM +0200, Simo Sorce wrote:
> > Can you explain why you need a loopback from winbindd to smbd ?
> 
> winbind again and again calls out to the local smbd. There are too many cases
> to cover, or otherwise there is much code duplication. smbd should be notified
> that winbind is calling so that it can be told not to call winbind again, so
> that they don't lock up. This must be done in a secure way, no remote or
> non-root local user should be able to do this, as this might open the door for
> privilege elevation.
> 
> Volker
-- 
Simo Sorce    -  idra at samba.org
Samba Team    -  http://www.samba.org
Italian Site  -  http://samba.xsec.it