Ignore the primaryGruoupSID attribute in struct samu*

Gerald (Jerry) Carter jerry at samba.org
Fri Feb 24 18:09:13 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
> Volker,
> 
> Here's a patch (tested on standalone, dc, and domain members)
> for ignoring the primaryGroupSID attribute in a passdb.
> Instead pdb_get_group_sid() builds the group SID from
> the Unix primary gid.  It's wrong to try to keep the
> primary group SID in sync with the real Unix primary group.
> The fall back to setting the primary group RID to be 513
> is still there which seems to be ok.
> 
> If this patch is agreeable, then we are basically down
> to the security descriptor scenario.  I've got some
> thoughts on that as well and will send them in a followup
> mail.
> 
> The patch is also on-line at http://www.samba.org/~/jerry/patches/
> 

Volker,  I'd like to check this in to get it some mileage.
My setups continue to run ok.  Do you have any philosphical
objection to the patch ?  As in do you feel that we should
continue to try to honor the primaryGroupSID attribute?
That is really all I want to know.  The details of the code
is just grunt work.  No rocket science there.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD/0vJIR7qMdg1EfYRAvBSAKDwROG7lvAHNEQan67XayJnEEOhdACffiB/
fptZvqSvyhhIjABIVH6JKAg=
=cJ4s
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list