Stamping out name-based lookups

[Volker Lendecke]

Hi, Jeremy!

There's one call to user_in_group(_list in 3_0 speak) in posix_acls.c that I
don't really understand. I would like to get rid of name-based lookups as far
as possible. If you have a minute, could you explain what this really does and
why it's necessary?

Correctly verifying group membership of an arbitrary user is not possible in
the general winbind case, and as we have SIDs around we could do the local case
with passdb calls more easily I think.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20051219/34137894/attachment.bin