extending nss and examples/nss a bit

Gerald (Jerry) Carter jerry at samba.org
Tue Jan 13 15:43:23 GMT 2004

Hash: SHA1

Volker.Lendecke at SerNet.DE wrote:
| Hi!
| Talking to tridge on irc made me extend libnss_winbind.so (at
| least on linux) a bit. The view is to abstract from the internals
| of the winbind protocol and give user programs the ability
| to use winbind directly without importing our "includes.h".
| We came to the conclusion that it might be necessary to export
| sid<->[ug]id mappings as we do not always know the user's name.
| It's the old foreign SID game. The following patch does it.

I spoke with Volker about this on the phone and agree that
it is a needed piece of Samba.  The short summary is that
this would provided a shared library (and stable) interface
to the winbindd pipe protocol.

My only concern is placing it in libnss_winbind.so and
having applications dlopen("/lib/libnss_winbindd.so.2").
In fact, I mistook the original proposal to be extending
the NSS interface in glibc.  I think we could avoid further
confusion about this by simply build an equivalent library
that would be solely used for user space applications needing
to get information from winbindd that cannot be access via
NSS (e.g. converting a uid to a SID and vice-versa).

So my proposal would be to build new library named
libwbclient.so and header wbclient.h

- --
cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot (2003)
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the samba-technical mailing list