[PATCH] Small update to wbinfo --user-groups

Volker Lendecke Volker.Lendecke at SerNet.DE
Wed Feb 14 14:37:57 UTC 2018


On Wed, Feb 14, 2018 at 02:03:04PM +0100, Andreas Schneider wrote:
> On Wednesday, 14 February 2018 12:30:01 CET Volker Lendecke wrote:
> > On Wed, Feb 14, 2018 at 12:13:33PM +0100, Andreas Schneider via samba-
> technical wrote:
> > > I've added the following tests to 'wbinfo --user-groups':
> > > 
> > > NOTE: The information is retrieved using the machine account credentials
> > > with limited access permissions, the result may be incomplete or
> > > incorrect!
> > > 
> > > I get bug reports, that nested groups are not in the output. Those can
> > > only be calculated during authentication.
> > > 
> > > 
> > > Please review and push if OK.
> > 
> > If we want to be precise: This info is supposed to be correct after a
> > successful login, either via Kerberos or via NTLM, i.e. wbinfo -a.
> > Also, you might want to describe that we cache successful logins
> > indefinitely, so wbinfo -r will output stale information if group
> > memberships change in AD and the user has not re-logged in after that
> > change.
> > 
> > Hope that helps,
> 
> Thanks for the feedback. I the updated patch ok? I'm using "authenticated" 
> should I use "logged in"?

Sorry, this also does not mention anything like "authenticated". Wrong
patch?

Thanks, Volker

-- 
Besuchen Sie die verinice.XP 2018 in Berlin,
Anwenderkonferenz für Informationssicherheit
vom 21.-23.03.2018 im Sofitel Kurfürstendamm
Info & Anmeldung hier: http://veriniceXP.org

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de



More information about the samba-technical mailing list