[GSoC 2007] Improving Samba 4 winbind, a look back.

Wed Sep 19 13:36:05 GMT 2007

On Wed, Sep 19, 2007 at 03:11:07PM +0200, Kai Blin wrote:

> I'm not quite sure if I understand you correctly here. Are
> you saying that PAC caching is needed to figure out group
> membership? 

Yes, it is. The SamLogon and the corresponding Kerberos
calls are the only way to reliably make a DC calculate the
groups a user is member of.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20070919/760f416f/attachment.bin