CVS update: samba/source/auth

[Andrew Bartlett]

On Mon, 2004-03-01 at 03:48, vlendec at samba.org wrote:
> Date:	Sun Feb 29 16:48:19 2004
> Author:	vlendec
> 
> Update of /data/cvs/samba/source/auth
> In directory dp.samba.org:/tmp/cvs-serv14749/auth
> 
> Modified Files:
> 	auth_util.c 
> Log Message:
> Apply my experimental aliases support to HEAD. This will be a bit difficult to
> merge to 3_0, as the pdb interfaces has changed a bit between the two.
> 
> This has not been tested too severly (which means it's completely broken ;-),
> but I want it in for review. Feel free to revert it :-)
> 
> TODO:
> 
> make 'net groupmap' a bit more friendly for alias members.
> 
> Put that stuff into pdb_ldap.
> 
> Getting the information over to winbind. One plan without linking pdb into
> winbind would be to fill group_mapping.tdb with the membership information and
> have that as a cache (or use gencache.tdb?). smbd on a PDC or stand-alone
> could trigger that itself, the problem is a BDC using LDAP. This needs to do
> it on a regular basis. The BDC smbd needs to be informed about SAM changes
> somehow...

I see *no* reason why we should not just ask passdb inside winbind.  The
issues that prevented that work before 3.0 are not relevent here, as the
users in these groups are remote, and can't exist in posix without our
help.  Using gencache seems completely the wrong solution here.  (We
might call initgroups() without ever having had a login etc)

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20040301/61201498/attachment.bin