"net groupfilter" ?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Volker Lendecke wrote:
> On Tue, Dec 16, 2008 at 08:03:38AM -0600, Gerald (Jerry) Carter wrote:
>> If I understand this properly, the the case this is trying
>> to solve is Winbind joined to a Windows domain and using an
>> automatic idmap backend like tdb correct?  Because something
>> like idmap_ad[ex] already does filtering server side based on
>> the assigned gid in AD.
>>
>> This patch performs client side filtering so that the admin
>> doesn't have to manually manage the gid assignments centrally.
> 
> Correct.
> 
> Volker

So then Winbind would only assign gids to groups defined in
the filter?  If that is the case, then I don't think the changes
to auth.c are necessary.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJR8FKIR7qMdg1EfYRAsFzAKDFRdpuXt3c7wjvrRDW7HmjNoVjNACcDGaV
wxKAXglsv4MA2zXNVoErKRc=
=DKrr
-----END PGP SIGNATURE-----