[PATCH] New external idmap module

Dave Daugherty dave.daugherty at centrify.com
Tue May 30 23:26:27 GMT 2006


Jerry Sent: Tuesday, May 30, 2006 4:09 PM

Thanks Jerry - also a flexible approach.

BTW mine is just an LGPL'd thin wrapper external "C" calls to a
proprietary shared object library you get when you buy CDC.  Sounds like
that is not going to pass the GPL compliance test?

I think the two major bones 1) how to write an ID mapper that does not
violate the GPL, and 2) whether or not external mappers get to control
if winbind_idmap.tdb is to be used, which Michael's approach does not
seem to address.

Dave




-----Original Message-----
From:
samba-technical-bounces+dave.daugherty=centrify.com at lists.samba.org
[mailto:samba-technical-bounces+dave.daugherty=centrify.com at lists.samba.
org] On Behalf Of Gerald (Jerry) Carter
Sent: Tuesday, May 30, 2006 4:09 PM
To: Volker.Lendecke at SerNet.DE
Cc: simo; Samba Technical
Subject: Re: [PATCH] New external idmap module

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Volker,

> On Tue, May 30, 2006 at 03:01:53PM -0400, simo wrote:
>> 1) Define whether it is a local or a remote store
> 
> As discussed on IRC, I don't really like this patch. In
> particular the fact that it allows to deactivate the local
> tdb cache. The reason you gave on IRC for this is really
> scary for me, the ability to change ID mappings for existing
> SIDs at will is asking for a whole lot of trouble.
>
> If this is needed I would much rather see a script forked
> per unknown SID that is then entered into the
> winbindd_idmap.tdb.

Before things get to deep, please review Michael Mastacci's patch
(I was supposed to but have not had a chance yet):
http://lists.samba.org/archive/samba-technical/2006-April/046403.html





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEfNB1IR7qMdg1EfYRAqqxAJ0Qwf9bXlOP8TBSM8oG28bZhIr42QCeLgVo
RFmfIKsa+UYVRja2vwrhaC4=
=oWNA
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list