Stamping out name-based lookups
Volker.Lendecke at SerNet.DE
Mon Dec 19 13:55:18 GMT 2005
There's one call to user_in_group(_list in 3_0 speak) in posix_acls.c that I
don't really understand. I would like to get rid of name-based lookups as far
as possible. If you have a minute, could you explain what this really does and
why it's necessary?
Correctly verifying group membership of an arbitrary user is not possible in
the general winbind case, and as we have SIDs around we could do the local case
with passdb calls more easily I think.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20051219/34137894/attachment.bin
More information about the samba-technical