[PATCH][WIP] Make the Samba AD DC multi-process

Stefan Metzmacher metze at samba.org
Wed Dec 7 12:09:24 UTC 2016


Hi Andrew,

> Do you have any other comments?  Is the general approach OK?
> 
> Can I merge more of the RPC code, like the 'uses handles' declaration?

Do you have a rebased branch somewhere?

Regarding the are_handles_used please make it an
uint64_t flags (with DCESRV_IGNORE_INVALID_ASSOC_GROUP)
and move it to the end of the structure.

We need to remember if the whole endpoint may ignores
association groups and let dcesrv_bind() directly create a new
association group if the given id is not found. Then we don't need any more
logic changes and hacks in dcesrv_check_or_create_context().

The trick is that an endpoint can only marked with
DCESRV_IGNORE_INVALID_ASSOC_GROUP if *all* of it's interfaces
allow it. And it can only use the top level process model
in that case.

I don't understand how this can work when the lsarpc interface
is also registered on the ncacn_np:\\pipe\\netlogon endpoint?

And we also need a way to disable this new behavior.

The dcesrv_get_mgmt_interface patch and (if possible
the pidl: Make dcesrv\_$name\_interface "static const")
patch can be pushed to master now.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20161207/8c468861/signature.sig>


More information about the samba-technical mailing list