outsourcing DCE/RPC to alternate programs - runtime config option

[Luke Kenneth Casson Leighton]

On Sun, Dec 12, 2004 at 10:12:31AM +1100, tridge at samba.org wrote:
> Michael,
> 
>  > Forgive my ignorance, but:  If one wants the DCE RPC functionality only, can
>  > they use the Samba RPC? 
> 
> In Samba4 you would do this:
> 
> 	server services = rpc
> 
> and this would make Samba only start the rpc server (so it would not
> start the builtin smb or ldap servers). It will only be listening on
> tcp ports 135 and 1024, plus any local rpc transports that are defined
> (such as /var/ncalrpc/DEFAULT and /var/ncalrpc/EPMAPPER) and any fixed
> ncacn_ip_tcp ports defined in the builtin IDL files.
 
 tridge - please excuse me for mentioning this but after
 _everything_ you said that i wasn't "allowed" to do because
 of various detailed technical descriptions, NOW you add in a
 ncalrpc transport into samba 4 and because it's you adding it,
 it's suddenly acceptable??

 ... did i miss something?

 never mind.  it's good that it's done.
 
 i assume the samba 4 ncalrpc implementation is root-only-accessible, yes?

 or, did you find a solution to opening /var/ncalrpc/ local transports
 as ordinary users?


> The original DCE/RPC implementation is available for free in the form
> of FreeDCE. You don't need to pay any license fees to
> anyone. Unfortunately it is also a fairly difficult codebase to work
> with, and doesn't provide any builtin support for the ncacn_np
> transport. 

 it's very very straightforward to add in new transports to FreeDCE.
 
 as a reference implementation, the DECNet3.0 transport, amongst
 others (including a unix domain socket transport) were all
 removed, with the stubs left there and very well documented -
 since converted by wez to a .dso loadable module API.

 it took me about three weeks to write an ncacn_np transport that used
 the samba tng "outsourcing" method (and as you rightly mention, the
 XAD project uses something similar, using samba 3 as the outsourcer).

 l.

-- 
--
<a href="http://lkcl.net">http://lkcl.net</a>
--