New group mapping and the auth subsystem
Jean Francois Micouleau
Jean-Francois.Micouleau at dalalu.fr
Sun Dec 2 02:44:01 GMT 2001
On Sun, 2 Dec 2001, Jeremy Allison wrote:
> > But how do you (on a member server) get the list of sids that a user
> > has? In particular, how do we do this if we don't have winbind?
>
> You can't get the list of SIDs for an "arbitrary" user, they
> need to have logged on via netlogon or PAC. Then we know what
> SIDs they have (from the return value) and we store it in the
> token.
you can get the list of SIDs of an arbitrary user !
you should even been able to log as a user, and call impersonate_user() on
another user with a different token !
> I understand where JF is coming from....
I come from France ;-)
J.F.
More information about the samba-technical
mailing list