Problem with explicit logon_path in pdb_ldap

Andrew Bartlett abartlet at samba.org
Sat Nov 26 06:44:21 GMT 2005


On Fri, 2005-11-25 at 09:25 +0100, Volker Lendecke wrote:
> On Fri, Nov 25, 2005 at 07:35:16AM +0100, Ingo Steuwer wrote:
> > Changing the default behavior, especially on this old and itensiviely used 
> > feature and between two minor releases, will confuse the user. There are too 
> > many of them who do not read changelogs.
> 
> You are relying on %-expansion in explicitly set ldap attributes? I can see
> that for the parameters logon path etc when no explicit attribute is set. But
> putting %u into an explicitly set attribute stretches it a bit in particular as
> clients also have variables that start with %.

This is where we started, and the policy I held when I was doing
pdb_ldap.  But then it was thought that having %L in particular in the
profile path was 'neat', and nobody knew about the client-side
expansion.  

> > Wouldn't it easier and more flexible to introduce an escape for "%", i.e. 
> > "%%"?
> > 
> > The example would expand to:
> > 
> > sambaProfilePath: \\SERVER\User$\Profile\V%%G_osver%%
> > 
> > so it will also be possible to set
> > 
> > sambaProfilePath: \\SERVER\%U\Profile\V%%G_osver%%
> 
> No, I don't think this is right. I would like to slowly but steadily converge
> to NT4 behaviour, in particular in migration scenarios you can not go through
> the possibly very many users.

The way you would handle this is to have the SAMR and SAMSYNC 'set' of
these attributes do the escape (% -> %%), so that from the NT4 side, it
is symmetric. 

The problem is that we have had two different conventions in this
behaviour in Samba3 already, I'm worried about a third...

Andrew Bartlett 
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20051126/dda4a3bf/attachment.bin


More information about the samba-technical mailing list