[Samba] Enumerate group members

[Volker Lendecke]

On Mon, Jun 12, 2006 at 07:36:49PM -0600, Diego Rivera wrote:
> Thanks for the quick answer anyway.  So, according to AD ACL's, it's 
> possible that a machine in a domain which needs to check group access 
> (i.e. a samba box) may not get accurate information about whether a user 
> is a member of a group? Or just that the ACL's may forbid the 
> enumeration of group members for particular groups?

The latter. The operation that will always work is to return
the groups a user is in when logging in as that user.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/20060613/6d290f95/attachment.bin