[Samba] Executable 'username map'

[Fran ç ois Laupretre]

I am sorry but I don't have a patch and, as I am on holiday out of home from
tomorrow, I won't work on it before mid-august. And I don't know very well
the Samba coding practice concerning portability. But, if it is not done
when I'm back, I send you a patch.

Basically, I would run the command via smbrun(), connected to a pipe(), with
anything from stderr going to the smbd log. The first line of stdout would
contain the result. An empty stdout would mean that the username cannot be
mapped (like for autofs executable maps).

We also have two choices for the 'username map' parameter when 'username map
script' is set : either it is ignored, or it is parsed after the script, but
only if the script didn't return anything. Up to you.

Regards

François

> -----Original Message-----
> From: Gerald (Jerry) Carter [mailto:jerry at samba.org] 
> Sent: Friday, July 22, 2005 3:26 PM
> To: Laupretre, François (CALYON); Jeremy Allison
> Subject: Re: RE : [Samba] Executable 'username map'
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> François Laupretre wrote:
> 
> > In short, I think that the solution of getting the map from
> > NIS or LDAP is a good one, but, if Samba could execute
> > an external script to resolve the mappings, it would be
> > much more general, not so complicated for the
> > users, and easier to implement in the Samba code (and 
> > to document). It would also necessitate only one new
> > configuration parameter.
> 
> François,
> 
> I actually retracted my initial statement last night.
> Adding a 'username map script' is a flexible solution
> to solving the directory integration problem.  If you
> have a patch, go ahead and send it to me or I can code
> this up later today.
> 
> 
> 
> cheers, jerry
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> 
> iD8DBQFC4PQFIR7qMdg1EfYRAjQOAKCMu77nMoRCjka9bBmyLDOKq7PfdACfYqNf
> PaMzoqwRqfKnRJZcpH1tYOI=
> =SdaT
> -----END PGP SIGNATURE-----
> 
-------------- next part --------------
Ce message et ses pièces jointes (le "message") est destiné à l'usage    
exclusif de son destinataire.                                            
Si vous recevez ce message par erreur, merci d'en aviser immédiatement   
l'expéditeur  et de le détruire ensuite. Le présent message  pouvant  
être altéré à notre insu,  CALYON Corporate and Investment Bank                              
ne peut pas être engagé par son contenu. Tous droits réservés. 
          
This message and/or any  attachments (the "message") is intended for     
the sole use of its addressee.                                            
If you are not the addressee, please immediately notify the sender and    
then destroy the message.  As this message and/or any attachments may 
have been altered without our knowledge,  its content  is not legally 
binding on CALYON Corporate and Investment Bank. All rights reserved.