All of lore.kernel.org
 help / color / mirror / Atom feed
* about group membership
@ 2004-05-11 17:12 MeiJia
  2004-05-11 18:22 ` Olaf Kirch
  0 siblings, 1 reply; 2+ messages in thread
From: MeiJia @ 2004-05-11 17:12 UTC (permalink / raw)
  To: NFS-devel

Hi developers,

While i'm looking at the NFS (include v4), I didn't find any code which 
handle supplement group membership issues. so I'm curious how could NFS 
deal with following situations, or what's the plan to support:
  - normal supplement groups
  - setuid binaries
  - setgroups binaries

Thanks!

MeiJia



-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: about group membership
  2004-05-11 17:12 about group membership MeiJia
@ 2004-05-11 18:22 ` Olaf Kirch
  0 siblings, 0 replies; 2+ messages in thread
From: Olaf Kirch @ 2004-05-11 18:22 UTC (permalink / raw)
  To: MeiJia; +Cc: NFS-devel

On Tue, May 11, 2004 at 11:12:41AM -0600, MeiJia wrote:
> While i'm looking at the NFS (include v4), I didn't find any code which 
> handle supplement group membership issues. so I'm curious how could NFS 
> deal with following situations, or what's the plan to support:
>  - normal supplement groups

Supplementary groups are transported in the AUTH_UNIX credentials.
If you you use a different authentication flavor, supplementary
groups are usually retrieved from the password database.

>  - setuid binaries

Linux nfs normally uses the effective uid in any requests
(if credentials are available; which is not a given for all
auth flavors).

There is an option to fall back to the real uid in certain cases,
but that is really more of a hack.

>  - setgroups binaries

I think we just add the effective uid to the groups vector,
if it is different from the rgid.

Olaf

-- 
Olaf Kirch     |  The Hardware Gods hate me.
okir@suse.de   |
---------------+ 


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2004-05-11 18:22 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-05-11 17:12 about group membership MeiJia
2004-05-11 18:22 ` Olaf Kirch

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.