Built-in SIDs are filtered in ACLs for no reason

Gerald (Jerry) Carter jerry at samba.org
Mon Nov 19 15:21:45 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tsiyon Sadiky wrote:
> Hi.
>
> When translating ACE entries, each entry is checked using 
> util_sid.c:non_mappable_sid(), which filters built-in SIDs.
> 
> I removed that check and it worked fine for me.
> 
> Can anyone think of a reason why this code is there?
> 
> My theory is that it's from historical reasons. In around 3.0.20 
> built-in groups were added to Samba, but the filtering code goes
> back much further.

This was fixed a while ago I think (this past April).  Check
the releases notes.  Check the 3.0.23d code.




cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHQaoIIR7qMdg1EfYRAtmlAJ4nrqDtSTVzrX/2dNSH6Uxpt/zb+gCggndN
+8Iu6mLcKXiT5U4XDiCnIHU=
=3zLk
-----END PGP SIGNATURE-----


More information about the samba-technical mailing list