Nested groups support?

[Simo Sorce]

Hello Arthur, indeed the "unrolling" of subgroups is the only way I have
tought since now. IIRC winbindd should already do something like that,
at least for ads, I remember talking about exactly this thing with
trige.
Are you sure it is not working for you?
If not I may think to look for a patch, but the real problem is that
this is a really time consuming task ... at least O(n^2) and may be too
much for wide organizations ...

Simo.

On Wed, 2004-01-14 at 13:38, Arthur van Dongen wrote:
> Hi, all,
> 
> Is anyone working on nested groups support for Samba as a member of a W2K
> domain? This is currently the only thing blocking the roll-out of Samba
> servers in our organisation.
> 
> My first impression is that winbind could replace the groups in a group
> with the members of this group. So, if User1 is in Group1, and Group1 is a
> member of Group2, winbind places User1 as a member of both Group1 and
> Group2. This does not conflict with the Unix user/group architecture.
> 
> Arthur
-- 
Simo Sorce - simo.sorce at xsec.it
Xsec s.r.l. - http://www.xsec.it
via Garofalo, 39 - 20133 - Milano
mobile: +39 329 328 7702
tel. +39 02 2953 4143 - fax: +39 02 700 442 399