Re: about group membership

[Olaf Kirch <okir@suse.de>]

On Tue, May 11, 2004 at 11:12:41AM -0600, MeiJia wrote:
> While i'm looking at the NFS (include v4), I didn't find any code which 
> handle supplement group membership issues. so I'm curious how could NFS 
> deal with following situations, or what's the plan to support:
>  - normal supplement groups

Supplementary groups are transported in the AUTH_UNIX credentials.
If you you use a different authentication flavor, supplementary
groups are usually retrieved from the password database.

>  - setuid binaries

Linux nfs normally uses the effective uid in any requests
(if credentials are available; which is not a given for all
auth flavors).

There is an option to fall back to the real uid in certain cases,
but that is really more of a hack.

>  - setgroups binaries

I think we just add the effective uid to the groups vector,
if it is different from the rgid.

Olaf

-- 
Olaf Kirch     |  The Hardware Gods hate me.
okir@suse.de   |
---------------+ 


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs