Re: [SSSD] How to map primaryGID?

2012-04-23 Thread Simo Sorce
On Mon, 2012-04-23 at 09:09 -0400, Stephen Gallagher wrote: > > Ack, but what does this mean? > > > > +}/* [noprint,gensize,nopull,public,nopush,nosize] */; > > I took that straight from the Samba sources. I don't know what it > means > either :) I'll remove it. > It's a comment that tell how th

Re: [SSSD] How to map primaryGID?

2012-04-23 Thread Stephen Gallagher
On Mon, 2012-04-23 at 14:59 +0200, Jakub Hrozek wrote: > On Sun, Apr 22, 2012 at 03:43:16PM -0400, Stephen Gallagher wrote: > > On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > > > Ok, I just hit a snag and I'm not sure how best to proceed. All users on > > > a POSIX system need to hav

Re: [SSSD] How to map primaryGID?

2012-04-23 Thread Jakub Hrozek
On Sun, Apr 22, 2012 at 03:43:16PM -0400, Stephen Gallagher wrote: > On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > > Ok, I just hit a snag and I'm not sure how best to proceed. All users on > > a POSIX system need to have a default GID value, which in most cases is > > mapped to a u

Re: [SSSD] How to map primaryGID? was "Re: [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings"

2012-04-23 Thread Jakub Hrozek
On Mon, Apr 23, 2012 at 09:35:44AM +0200, Sumit Bose wrote: > On Sun, Apr 22, 2012 at 08:07:56PM -0400, Stephen Gallagher wrote: > > On Sun, 2012-04-22 at 17:27 -0400, Simo Sorce wrote: > > > On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > > > > Ok, I just hit a snag and I'm not sure

Re: [SSSD] How to map primaryGID? was "Re: [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings"

2012-04-23 Thread Sumit Bose
On Sun, Apr 22, 2012 at 08:07:56PM -0400, Stephen Gallagher wrote: > On Sun, 2012-04-22 at 17:27 -0400, Simo Sorce wrote: > > On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > > > Ok, I just hit a snag and I'm not sure how best to proceed. All users on > > > a POSIX system need to have

Re: [SSSD] How to map primaryGID? was "Re: [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings"

2012-04-22 Thread Stephen Gallagher
On Sun, 2012-04-22 at 17:27 -0400, Simo Sorce wrote: > On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > > Ok, I just hit a snag and I'm not sure how best to proceed. All users on > > a POSIX system need to have a default GID value, which in most cases is > > mapped to a user-private gr

Re: [SSSD] How to map primaryGID? was "Re: [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings"

2012-04-22 Thread Simo Sorce
On Sun, 2012-04-22 at 15:10 -0400, Stephen Gallagher wrote: > Ok, I just hit a snag and I'm not sure how best to proceed. All users on > a POSIX system need to have a default GID value, which in most cases is > mapped to a user-private group to help avoid accidental permission-leaks > when that use

[SSSD] How to map primaryGID? was "Re: [PATCHES][PRELIMINARY] Add support for Active Directory objectSID mappings"

2012-04-22 Thread Stephen Gallagher
Ok, I just hit a snag and I'm not sure how best to proceed. All users on a POSIX system need to have a default GID value, which in most cases is mapped to a user-private group to help avoid accidental permission-leaks when that user creates files. However, when mapping a user from Active Directory