outsourcing DCE/RPC to alternate programs - runtime config option

Luke Kenneth Casson Leighton lkcl at lkcl.net
Wed Dec 8 00:02:12 GMT 2004


for details of the full set of xad patches to open source projects,
including the outsourcing authentication plugin module for samba
(auth_paula) which may be of benefit to the samba team in helping
transition from samba 4 to samba 3 in smaller more manageable stages,
see:

	http://www.padl.com/Products/XADFrequentlyAskedQuestio.html

which refers to:

	http://www.padl.com/download/xad_oss_plugins.tar.gz

it would appear that luke howard has added a much simpler
version of NETLOGON, called "paula", which is obviously
root-only-accessible (unlike NETLOGON which, as you are no doubt
aware, is anonymously-accessible but performs a secret-key-based
random session key generation step - not a very good one these
days but there you go).

"paula" appears to be a DCE/RPC pipe, which means that it has an IDL
file.

if the samba team were to implement "paula" server-side in samba 3 as a
root-only-accessible transport, and samba 4 used the auth_paula patch,
then the amount of code needed to be rewritten in order to make samba 4
useable in production environments would be minimalised greatly.

this can only be of benefit to the samba team and users of samba
everywhere.

l.


On Tue, Dec 07, 2004 at 11:38:40PM +0000, Luke Kenneth Casson Leighton wrote:
> dear samba team,
> 
> please could you add an option to allow "outsourcing" of dce/rpc
> traffic into samba 3 and samba 4?


More information about the samba-technical mailing list