Setting ACLs to winbind groups

[Rob Siemborski]

On Sun, 13 Jul 2003, Marcelino Vallejo wrote:

> I've found that installing libnss-mysql I could gave ACLs to non UNIX
> groups. Those groups are declared in MySql tables.
> One step forward.

Doing this can be really expensive on your MySQL server, since every call
to auth_newstate() in cyrus will iterate through all of the groups.

A better way would be to write a mysql (and pgsql, and oracle) module for
ptloader.  2.2 supports this sort of modularity with little or no
difficulty.  ptloader then takes care of caching and so on for you.

-Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper