Built-in SIDs are filtered in ACLs for no reason
Gerald (Jerry) Carter
jerry at samba.org
Mon Nov 19 15:21:45 GMT 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Tsiyon Sadiky wrote:
> Hi.
>
> When translating ACE entries, each entry is checked using
> util_sid.c:non_mappable_sid(), which filters built-in SIDs.
>
> I removed that check and it worked fine for me.
>
> Can anyone think of a reason why this code is there?
>
> My theory is that it's from historical reasons. In around 3.0.20
> built-in groups were added to Samba, but the filtering code goes
> back much further.
This was fixed a while ago I think (this past April). Check
the releases notes. Check the 3.0.23d code.
cheers, jerry
- --
=====================================================================
Samba ------- http://www.samba.org
Centeris ----------- http://www.centeris.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFHQaoIIR7qMdg1EfYRAtmlAJ4nrqDtSTVzrX/2dNSH6Uxpt/zb+gCggndN
+8Iu6mLcKXiT5U4XDiCnIHU=
=3zLk
-----END PGP SIGNATURE-----
More information about the samba-technical
mailing list