[Samba 4] ACL access checks pushed

Nadezhda Ivanova nadezhda.ivanova at postpath.com
Thu Nov 5 08:45:31 MST 2009


Hi Team,
I just pushed the acl module that now handles access checking on LDAP modify, add, delete and rename operations.
The kludge_acl is still there to handle search until it is implemented. Tested as best we could, but this is an area with infinite number of use cases. So, if you see something behaving funny, let me know ASAP. I do have some debugging messages at level 10. This is an area that needs improvement, perhaps we should consider adding some configuration parameters to enable logging of certain parts of code only, e.g separate ldb modules, or only security to make it easier to enable higher levels of debug without getting clogged.

Regards,
Nadezhda Ivanova


More information about the samba-technical mailing list