git patch 'client managed wide links (w documentation updated)'....

[Andrew Bartlett]

On Mon, 2011-06-13 at 01:22 -0700, Linda Walsh wrote:
> Tested with the downloaded 3.6.0-rc2 candidate with patches install...
> but running into odd performance probs that I'm not sure if are
> samba probs or not (I _did_ try enabling SMB2, but wireshark says that
> was a nogo)...  I didn't compile w/devel, or debug or profiling, so not
> sure ...  but the 'feature' works...  not so sure about 3.6's 
> performance yet...
> will have to use it some more....
> 
> So, what else is needed to get this in?

Firstly, thankyou for the patch, and the included documentation. Due to
timing, this can't be landed for 3.6.0, and will need careful review,
particularly by the members of the Samba Team who designed the
restriction.

> So far the comments have been overwhelming....

I think my fellow team members who would normally comment are currently
a little overwhelmed trying to get 3.6.0 out the door.  

Getting this into bugzilla will help ensure it's not lost. 

I would however start by noting that we understand the difficulties
here, and have discussed this at length with other users who found our
security stance difficult.  Adding another parameter would gain some of
the 'informed consent' required to obtain the previous behaviour, but it
still has drawbacks - our broader user base is notorious for setting
dozens of unnecessary parameters based on old or specific examples found
on the web.  I fear that users adding this may not have actually read
the smb.conf manpage, and so become exposed to the issue again
unwittingly. 

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org