[PATCH] winbind interface to extract SIDs from PAC

[Volker Lendecke]

On Tue, Jul 17, 2012 at 03:05:53PM +0200, Christian Ambach wrote:
> So if this can only happen in Windows environments, we sort of have to
> expect that authorization on the filesystem might also be
> Windows style
> This would require that smbd and Ganesha use the same Unix token (as the
> ACLs might contain BUILTIN or whatever SIDS that are not in the PAC
> directly, but would be added by smbd).

Well, the requirments I have seen do not mention anything
like this. The team Christof has been doing this for
explicitly asked for the PAC contents and nothing else.

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de