"security = domain" lists more groupmembers than "security = ads"
ks at sernet.de
Mon Oct 17 13:04:56 GMT 2005
I have a question about winbindd design.
We noticed, that with "security = domain" winbindd
enumerates all members of a group plus all users
who have this group as their primary group.
"Security = ads" only enumerates the mebers of
the group, not the users which have it as their
A Sniff shows, that the MMC works in the same way
as rpcclient / "security = domain". There ist a
second ldapsearch request for users having the group
as their primary group.
The question is whether winbindd should do the
second ldapsearch request, too. This means to
behave different to Linux, but like Windows.
With kind regards,
Karolin Seeger, SerNet Service Network GmbH
phone: +49-551-370000-0, fax: +49-551-370000-9
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20051017/9984ed8a/attachment.bin
More information about the samba-technical