Messages in this thread | | | From | Jesse Pollard <> | Subject | Re: UID/GID mapping system | Date | Thu, 11 Mar 2004 08:31:02 -0600 |
| |
On Thursday 11 March 2004 02:29, Søren Hansen wrote: > ons, 2004-03-10 kl. 23:45 skrev Trond Myklebust: > > The NFSv4 client and server already do uid/gid mapping. That is > > *mandatory* in the NFSv4 protocol, which dictates that you are only > > allowed to send strings of the form user@domain on the wire. > > Clever! > > > If you really need uid/gid mapping for NFSv2/v3 too, why not just build > > on the existing v4 upcall/downcall mechanisms? > > Because that would require changes to both ends of the wire. I want this > to: > 1. Work for ALL filesystems (NFS, smbfs, ext2(*) etc.) > 2. Be transparent for the server.
It will be a major security vulnerability.
> > *: For ext2, this could come in handy if you are moving disks between > systems.
Mapping fails in this case due to UID loops (been there done that too - had to spend a week changing uids because of it - most were quickly changed because there was no conflict, but about 100 out of 1000 were in loops. Users had multiple accounts on both machines, but different uids on each. You can end up having to map the same uid to two different uids. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |