async sid2gid

simo idra at samba.org
Thu Oct 19 23:36:18 GMT 2006


On Thu, 2006-10-19 at 19:15 -0400, simo wrote:
> On Thu, 2006-10-19 at 16:33 -0500, Gerald (Jerry) Carter wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > simo wrote:
> > > Found this while working on the idmap code:
> > > 
> > > In nsswitch/winbindd_async.c
> > >   in winbindd_dual_sid2gid()
> > >     line 406
> > > 
> > > There seem to be a very odd call back to sid_to_gid() that I think
> > > shouldn't be there (it could even loop if winbindd wasn't dual daemon as
> > > sid_to_gid() calls back winbindd_sid_to_uid()).
> > > 
> > > It is probably completely safe to remove it, but I'd like to be 100%
> > > sure someone didn't left it there for a reason.
> > 
> > This is for handling local machine groups and the BUILTIN domain
> > IIRC.    It shouldn't loop as the _NO_WINBIND environment variable
> > is set.
> 
> The only other caller that ends up there that's not sid_to_gid() is 
> nsswitch/winbind_nss_linux.c:_nss_winbind_sidtogid()
> 
> Is it just for that?
> What is _nss_winbind_sidtogid() used for ?
> Seem that nobody calls it.

Sorry,
saw just now that WINBINDD_SID_TO_GID it is used also by wbinfo.

Not sure if wbinfo -Y is supposed to really return BUILTIN.

What do you mean exactly by "local machine groups" btw?
mapped groups? 

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org



More information about the samba-technical mailing list