Re: winbindd and group lookups

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Mon, 9 Sep 2002 10:10:15 +0200

Jerry Murdock wrote:

> One thing I like about the current external_acl approach is that it allows
> a way to deny based on user without causing a login popup from the browser.

This would be possible in all 3 approaches to groups..

  a) proxy_auth ACLs listing the users (just list an non-proxy_auth acl last
in the deny line)
  b) external_acl groups
  b) groups connected to authentication (not yet implemented or specified).

> Maybe I've been dense and missed another solution (wouldn't surprise me),
> but I'd hate to lose this ability.

Don't worry ;-)

Regards
Henrik
Received on Mon Sep 09 2002 - 02:10:24 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:16:30 MST