[PATCH v2 0/5] cifs-utils: plugin interface for SID to UID/GID mapping

Jeff Layton jlayton at samba.org
Tue Dec 18 08:04:57 MST 2012


On Tue, 18 Dec 2012 15:45:17 +0100
"Stefan (metze) Metzmacher" <metze at samba.org> wrote:

> Hi Jeff,
> 
> I didn't look at the whole patchset in detail, but I think
> such a new API should support IDMAP_BOTH, which means that
> a sid can resolve into a uid and a gid at the same time.
> 
> This is very important as it allows groups to own files
> e.g. BUILTIN\Administrators is likely to be the owner of a lot
> of files. And it's the only way to support the 'sIDHistory' for users.
> 
> metze
> 

I'm not sure I understand how that would work. The situation is often
going to be something like this:

"The kernel has an ACL that it has fetched from the server. That ACL
has a SIDs in it that are designated as the user and group owner. The
goal is to turn those into the st_uid and st_gid values as presented by
stat()."

So...how does IDMAP_BOTH come into play here?

-- 
Jeff Layton <jlayton at samba.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20121218/edf82803/attachment.pgp>


More information about the samba-technical mailing list