Primary Group SID

Andrew Bartlett abartlet at samba.org
Mon Feb 9 20:11:00 GMT 2004


On Tue, 2004-02-10 at 06:21, Bostjan Golob wrote:
> I hacked together a little patch for the LDAP backend that resolves a
> user's primary gid into a SID and uses that as the primary group SID. If
> the group has no mapping, the user gets the Domain Users group as the
> primary group.
> 
> This is just a quick proof-of-concept patch that probably needs some
> polishing and moving into a more general location. If people are
> satisfied with this patch, I'll make a more general one (a bit out of
> practice with samba code at the moment :).

I don't like the getpwnam() lookup.  Now I remember what happened to
this code...

I would prefer that we re-introduced the code to look at gidNumber, and
translate it on that basis.  If the group mapping does not exist, then
the algorithmic mapping should be used.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040210/2176d1e4/attachment.bin


More information about the samba-technical mailing list