winbind proxy only mode?

Jeremy Allison jra at samba.org
Mon Jun 28 20:41:38 GMT 2004


On Mon, Jun 28, 2004 at 06:42:38PM +0200, Volker.Lendecke at SerNet.DE wrote:
> Hi!
> 
> Besides doing idmap stuff winbind in Samba 3 has the very nice feature of
> speeding up the authentication against a DC a lot. It does so by caching an
> authenticated connection to the NETLOGON pipe of the DC right up to the
> SamLogon call. winbind offers the service to use this connection to the smbd's
> which don't have to find and connect to the DCs on their own. 
> 
> A little thing that has always annoyed me is the fact that winbind can not be
> run without the 'idmap [ug]id' parameters correctly set even if libnss_winbind
> is not used. The attached patch lets winbind start even if none of these
> parameters is set. Naturally, no id mapping can take place without them. This
> enables winbind to run in a netlogon proxy only mode.
> 
> Comments?

Commit it - if it passes valgrind :-). Looks good to me.

Jeremy.


More information about the samba-technical mailing list