[OpenAFS-devel] interesting issue with setgroups wrapper...

[Neulinger, Nathan]

Yes/no... It's an "anonymous user", but it's still a connection that you
established with your password.

i.e. map to //host/username, then to //host/public, where public is a
guest accessible share.

Also, it doesn't appear this is completely reliable behavior, as I can
reproduce it sometimes, but not others. (Not sure 100% what causes the
setgroups() to be issued, it doesn't get issued in all cases.)

I just figured that this behavior is different than all the other
initgroups/setgroups behaviors. They both maintain the pag for all cases
other than the empty-group-list case. If it passes a list of groups -
i.e. if 'nobody' had some aux groups, it would maintain the pag.=20

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: chas williams [mailto:chas@cmf.nrl.navy.mil]=20
> Sent: Thursday, May 23, 2002 11:10 AM
> To: Neulinger, Nathan
> Cc: openafs-devel@openafs.org
> Subject: Re: [OpenAFS-devel] interesting issue with setgroups=20
> wrapper...=20
>=20
>=20
> In message=20
> <5958610EC585FA42B1CC3D20E216BE70190C15@umr-mail6.umr.edu>,"Neulinge
> r, Nathan" writes:
> >Not between multiple users, between the user, and anonymous
> >non-user-based connections on the same smb session. (All that screwy
> >stuff windows does with multiple samba connections from the same PC.)
> >The assumption is that a single smbd has a single afs authentication
> >context is still kept.
>=20
> if i read this correctly then the user's smbd is switching between
> the user and the anonymous user.  you wouldnt want the anonymous user
> to be able to user your pag so smbd is dropping all the groups when=20
> switching from the user to the anonymous user.  it probably=20
> restores the
> groups with initgroups() instead of saving the groups with getgroups()
> and restoring with setgroups()?
>=20
>=20