On Thu, 2003-03-06 at 08:17, Ken Cross wrote: > > > > Ken's patch is not required for posix users of winbind (ie > > the NSS subsystem). It is required if you want (for a custom > > user interface) to know all the members of a particular > > group, but I'm not sure it's the right way to do it. (I > > think a custom winbind command would do better). > > > > I'm not being argumentative (really!), but the *main* reason for my > patch is that it will give you consistent information whether you've > joined an NT domain or an AD. That is, all the group members will be > returned from WINBINDD_GETGRGID or WINBINDD_GETGRNAM either way.
So, wouldn't that mean that the 'correct' approach would be to strip such users from the RPC groups? :-) Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
