including local groups in WINBINDD_LIST_GROUPS (QueryGroupList)

Pavel Filipenský pfilipensky at samba.org
Wed Apr 26 08:58:07 UTC 2023


Hi all,

I would like to discuss this commit 
https://gitlab.com/samba-team/samba/-/merge_requests/3025/diffs?commit_id=c2dbb6886118515ffc6236497d478ec814df344d

Please see also comment from metze: 
https://gitlab.com/samba-team/samba/-/merge_requests/3025#note_1360642698

Background:

I was fixing a bug in nss_wrapper - it was not correctly implementing 
the GETGROUPLIST(3) - list of groups that user belongs to.
With the nss_wrapper fix the test_membership_user (local.nss.membership) 
fails. It compares memberships of a user obtained via:

1) GETGROUPLIST()   ... group BUILTIN/users is newly showing up
2) GETGRENT   ... group BUILTIN/users is not listed for ROLE_DOMAIN_MEMBER

* Do we want such change as a new default?
* Or should be configurable? With what default?
* Or we want to keep the old behavior and only change the failing test?


Thanks,
Pavel




More information about the samba-technical mailing list