[PATCH] Small update to wbinfo --user-groups

[Volker Lendecke]

On Wed, Feb 14, 2018 at 12:13:33PM +0100, Andreas Schneider via samba-technical wrote:
> I've added the following tests to 'wbinfo --user-groups':
> 
> NOTE: The information is retrieved using the machine account credentials with 
> limited access permissions, the result may be incomplete or incorrect!
> 
> I get bug reports, that nested groups are not in the output. Those can only be 
> calculated during authentication.
> 
> 
> Please review and push if OK.

If we want to be precise: This info is supposed to be correct after a
successful login, either via Kerberos or via NTLM, i.e. wbinfo -a.
Also, you might want to describe that we cache successful logins
indefinitely, so wbinfo -r will output stale information if group
memberships change in AD and the user has not re-logged in after that
change.

Hope that helps,

Volker

-- 
Besuchen Sie die verinice.XP 2018 in Berlin,
Anwenderkonferenz für Informationssicherheit
vom 21.-23.03.2018 im Sofitel Kurfürstendamm
Info & Anmeldung hier: http://veriniceXP.org

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de