s4 winbind add some rpc does it worth it ?

Sassy Natan sassyn at gmail.com
Tue Mar 2 12:28:59 MST 2010


I have tested winbind 3 with samba4.
It seems to work, but there is some issues.


see here
http://archives.free.net.ph/message/20100125.221530.2ed604de.en.html

http://archives.free.net.ph/message/20100127.124344.7361f914.en.html

I still didn't figure out why is so slow?

Sassy

On Tue, Mar 2, 2010 at 8:57 PM, Matthieu Patou <
mat+Informatique.Samba at matws.net <mat%2BInformatique.Samba at matws.net>>wrote:

> Hello,
>
> The title of my email says mostly all, as some of you have heard I'm
> working on winbind in s4 because I need it (I'm getting bored of 3000007
>  groups, ...).
>
> So far the job was pretty easy, and I expect that the result worth the time
> I invested even if with couple of month this code will be useless because s4
> should be able to use s3 winbind or will ship with s3 winbind.
> Now I find that the groups returned are not complete because the rpc call
> that is used well is specified not to return all the group (not to name the
> case of groups of groups) it is samr_GetGroupsForUser
> even with the help of GetAliasMembership I still miss a kind of groups
> (universal ones).
>
> A look at s3 way of doing things showed me the solutions: tokenGroups (not
> implemented yet in s4) and a fallback to LDAP request on member/memberof (so
> at least we can have all the groups).
> That means a new rpc (I think) in s4 winbind which is a bit of work (and
> tests).
>
> Maybe it worthless ? how soon do we plan to do the S3 winbind move ?
> Any comment on this will be greatly appreciated.
>
> Matthieu.
>
>


More information about the samba-technical mailing list