[PATCH] winbind interface to extract SIDs from PAC

Volker Lendecke Volker.Lendecke at SerNet.DE
Tue Jul 17 07:47:52 MDT 2012

On Tue, Jul 17, 2012 at 03:05:53PM +0200, Christian Ambach wrote:
> So if this can only happen in Windows environments, we sort of have to
> expect that authorization on the filesystem might also be
> Windows style
> This would require that smbd and Ganesha use the same Unix token (as the
> ACLs might contain BUILTIN or whatever SIDS that are not in the PAC
> directly, but would be added by smbd).

Well, the requirments I have seen do not mention anything
like this. The team Christof has been doing this for
explicitly asked for the PAC contents and nothing else.


SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

More information about the samba-technical mailing list