LDB_SCOPE_ONELEVEL without full traversal?

Stefan (metze) Metzmacher metze at samba.org
Thu Dec 7 06:29:36 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

tridge at samba.org schrieb:
> Volker,
> 
>  > Simple: I want a registry key per [smbshare] definition, and
>  > I want all parameters in that share definition (i.e.
>  > registry values). And if you look at for example the
>  > lanmanserver\shares key in a real windows registry, you will
>  > see a secdesc as binary value per share. So putting all
>  > values into a single tdb record just will not work.

what I see on a w2k3 box is this:

lanmanserver\shares\

has one key with a REG_MULTI_SZ per share.

and the REG_MULTI_SZ contains

CSCFlags=256
MaxUses=4294967295
Path=C:\WINDOWS\SYSVOL\sysvol\w2k3-native.vmnet9.vm.base\SCRIPTS
Permissions=0
Remark=Logon server share
Type=0

under lanmanserver\shares\security

has one key with a REG_BINARY per share.

so that would mean on tconX time we would just need to fetch

cn=<share>,cn=shares,cn=lanmanserver,...

and cn=<share>,cn=security,cn=shares,cn=lanmanserver

as LDB_SCOPE_BASE searches.

And I think it would be nice to store share in the regestry
in the same way windows does, maybe same admin tools,
use this to add shares...

metze
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFFd7TQm70gjA5TCD8RAkSoAKC+lNzHaQSDZlQDvS8boWw1ayXKQACfQn+n
MtH55YOljGI/dUg1VW76SeA=
=8k86
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list