Hello,

I have the following problem:
 - samba is a member of a w2k domain 
   (samba version 2.2.8a, compiled from tarball on RedHat9)
 - winbind works ok, no problems
 - domain users, when connecting through my samba,
   don't get their local group membership info (only 
   domain groups are initialized).
 - domain users, when connecting through any other
   pam-enabled service, get their group membership info
   ok (both domain groups and local groups).

This I traced to the fact that in source/nsswitch/wb_client.c, 
function winbind_initgroups, it only uses winbind to get group
information, avoiding the use of initgroups for non-local users.

Are there any reasons to avoid initgroups for domain users? I'm 
thinking of changing wb_client.c to always go with initgroups, 
but maybe there are reasons to use winbind. The windows domain is
not that big that enumeration of groups would be too expensive 
(<2000 users, <500 groups).

Or is it possible to get full group information through other changes?

Any hints on this issue would be appreciated.


Thanks,
Iustin Pop
��~��jب��'���yا��r���x�jب�+�w�u�퉩Z�ٚɷ�z��*k���z�"ج�{^�ם��^�'��^�Ǩ~�^�wb�'njZ+z{b�+h�&�جi�kz�u�ݢ�^�Ʈ�+�7����q�z+H*.j����az)�zw^v������ܨ��ޅ��o)�'�y�aj֧�جrZ,�������b���n�b�z+��"���*'�zޖ&�q����{^��(~�b�)ߢ���*'��-�'-�*k���םjwfk&޺yZ���:����h���i
 
"�w����&�����^��)z�(��^��kj{&��"�z����+��b�w(�֢��b��b��&���q�b�y譩�u�Z�)���q�
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to