Group in Group with samba4

[Andrew Bartlett]

On Mon, 2008-11-10 at 22:05 +0300, Matthieu Patou wrote:
> Dear all,
> 
> I am doing some tests with a fresh version of samba4, and it seems that 
> I am not able to create group that contains another group and give some 
> security rights to this group.
> 
> If I try to make a Security Group with a Global scope I can't add a 
> group (group are not listed in searchable object type). If I try a 
> Security Group with a "Domain Local" scope I can add group but after I 
> am unable to give rights to this group in any "security" tabs.
> 
> Is there any tricks or something is broken or maybe it's just impossible ?

We need to expand the code in auth/ that constructs the 'server info'
and 'session info' to expand group-in-group memberships. 

We may also need to handle some other details (as I've just never tried
this out enough to figure out all the details)

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.                  http://redhat.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20081111/3cd5a652/attachment.bin