Should security = server really be ROLE_DOMAIN_MEMBER ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anyone got any thoughts on this:

There seems to a lot of assumptions that lp_server_role() ==
ROLE_DOMAIN_MEMBER means we can access for example a
machine trust account password or domain sid in secrets.tdb.
But if you look at set_server_role(), you'll see that
SEC_SERVER is considered to be a domain member role.
Maybe we need a new role ?  ROLE_WISH_THIS_SEC_DIDNT_EXIST ?






cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEpq+eIR7qMdg1EfYRAubVAKDolRD7/byWt+1DS2kqgw4Xd0mevACfTJbl
ETr8/+6J/B/lVMSYlqq1chc=
=CzCl
-----END PGP SIGNATURE-----