[PATCH] LOOKUP_NAME_EXPLICIT to avoid lockups between winbindd and nscd

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

simo wrote:

>>   without the patch a simple "getent group
>> foo" will hang when runing nscd and you can easily trace it
>> for yourself.
> 
> Yeah I didn't think about nscd. But if the protection 
> does not work with nscd then nscd+winbindd is broken
> in many other cases as well I guess.

Mainly I've found getpwnam() and getgrnam() to be the main
offenders due to the fact that the first thing we do to service
the request is to try to convert the name to a SID.

The code path for getpwnam() converts the name to a SID
and then call winbindd_getpwsid().  The winbindd_getpwuid()
converts the uid to a SID and then calls winbindd_getpwsid()
as well so there is only one code path to debug.




jerry


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGVzEuIR7qMdg1EfYRAgKJAKDP4NC/Ug/nosYJB5e5K8DEI+YbeQCePhE4
EppJjhgPrVDW2mZ980PLnD0=
=ITl2
-----END PGP SIGNATURE-----