[PATCH] Re: Problem related to ID_TYPE_BOTH -Need suggestion

[Michael Adam]

On 2013-07-26 at 15:39 +0200, Michael Adam wrote:
> 
> The attached patchset fixes this in that it extends the
> WINBIND_GETGROUPS call to return the 'user private group' as part
> of the gid list when the user sid is mapped with ID_TYPE_BOTH.

For completeness, here is a transcript of some operations:

for a user:

  root at fs2:~# wbinfo -n S4AD\\user1
  S-1-5-21-676599534-2930001021-3790174432-1103 SID_USER (1)

  root at fs2:~# getent passwd S4AD\\user1
  S4AD\user1:*:201103:200513:user1:/home/S4AD/user1:/bin/false

  root at fs2:~# getent group S4AD\\user1
  S4AD\user1:x:201103:S4AD\user1

  root at fs2:~# id S4AD\\user1
  uid=201103(S4AD\user1) gid=200513(S4AD\domain users) groups=200513(S4AD\domain users),201103(S4AD\user1),100001(BUILTIN\users)

  root at fs2:~# wbinfo -r S4AD\\user1
  201103
  200513
  100001


for a group:

  root at fs2:~# wbinfo -n S4AD\\group1
  S-1-5-21-676599534-2930001021-3790174432-1108 SID_DOM_GROUP (2)

  root at fs2:~# getent group S4AD\\group1
  S4AD\group1:x:201108:

  root at fs2:~# getent passwd S4AD\\group1
  S4AD\group1:*:201108:201108::/home/S4AD/group1:/bin/false

  root at fs2:~# id S4AD\\group1
  uid=201108(S4AD\group1) gid=201108(S4AD\group1) groups=201108(S4AD\group1)


Cheers - Michael
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 215 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130726/86fb5b57/attachment.pgp>