Setting ACLs to winbind groups

Rob Siemborski rjs3 at
Sun Jul 13 11:13:34 EDT 2003

On Sun, 13 Jul 2003, Marcelino Vallejo wrote:

> I've found that installing libnss-mysql I could gave ACLs to non UNIX
> groups. Those groups are declared in MySql tables.
> One step forward.

Doing this can be really expensive on your MySQL server, since every call
to auth_newstate() in cyrus will iterate through all of the groups.

A better way would be to write a mysql (and pgsql, and oracle) module for
ptloader.  2.2 supports this sort of modularity with little or no
difficulty.  ptloader then takes care of caching and so on for you.


Rob Siemborski * Andrew Systems Group * Cyert Hall 207 * 412-268-7456
Research Systems Programmer * /usr/contributed Gatekeeper

More information about the Info-cyrus mailing list