I did look at the code changes and my view is that this support for AD groups really belongs to nss_ad. Since nss_ad currently does not support login we need to take a pragmatic approach.
Regards Julian Nicolas Williams wrote: > On Wed, May 13, 2009 at 02:25:17AM +0200, Erwin Aitenbichler wrote: >> Hi Nico, >> >> Thanks! >> >> The webrev is here: http://cr.opensolaris.org/~eait/onnv-ea/ >> >> I don't have ARC materials yet and I'd appreciate your help, since I'm >> new to the project. >> >> From the architectural point of view, my changes to nss_ldap/getgrent.c >> do not introduce any new interactions with other components. >> However, there might be an overlap with nss_ad in terms of >> functionality. > > But the behavior changes in a way that does matter as far as > architecture is concerned. I'll write up ARC materials tomorrow based > on the content of the CR. > >> My contributor number is #OS0371.
