svn commit: samba r2934 - in
Stefan (metze) Metzmacher
metze at samba.org
Tue Oct 12 14:06:16 GMT 2004
> On Tue, 2004-10-12 at 13:30, tridge at samba.org wrote:
>> - added SID_WORLD and SID_NETWORK to the foreign sids in the
>> provisioning, as these are auto-added to the nt_user_token (why is
>> that done? Andrew?)
> I think SID_NETWORK is added to be able to deny access by distinguishing
> local users from network users.
> No idea about SID_WORLD right now out of my head.
every security token in windows has the S-1-1-0 (World) SID attached
there's also a logon SID which we currently don't have.
(S-1-5-5-0-<logonsession_rid>) and maybe some other s-1-5-* SID's
S-1-5-11 Authenticated User
More information about the samba-technical