Message-ID: <3CFB03B3.90353B54@kegel.com>
Date: Sun, 02 Jun 2002 22:50:43 -0700
From: Dan Kegel <dank@kegel.com>
Reply-To: dank@kegel.com
MIME-Version: 1.0
To: Jean-Eric Cuendet <jean-eric.cuendet@linkvest.com>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: re: SMB filesystem
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: linux-kernel-owner@vger.kernel.org

Jean-Eric Cuendet wrote:
> [Currently], SMB access with Linux is done in the way:
> - Mount a share
> - Access it with rights defined at mount time.
> 
> I'm thinking of implementing an smb filesystem, the way AFS implement 
> the AFS client fs kernel driver.
> - Mount the smb filesystem on /smb (done at boot time)
> - Every user has list dir access on /smb
> - There, you see each workgroup/domain available on the network
> - Then in each domain, a list of machines
> - Then in each machine, a list of shares
> - Then a list of files/dirs
> Access will be granted using the SMB token (like a kerberos ticket) 
> issued by the primary domain controller.
> It's the way the windows explorer works. It's cool and useful.
> 
> What do you think of implementing it that way? Comments?
>
> I'd like to implement it with libsmbclient.so, a samba provided lib that 
> let you have access to workgroups/machines/shares in a MS network from 
> Linux (or UNIX).
> Then, it can't be kernel only. I need a userspace daemon

I've been hoping somebody would take this on.
Question: how will you carry the SMB token around? 
Let's imagine somebody starts a script that runs two programs 
that access SMB shares, and that they're initially not logged in at all.  
If this were Windows, it would prompt them once for their username 
and password, and then allow access from then on.
If you make the SMB token a property of the process, the 2nd program
won't be able to access the files after the 1st program somehow 
triggers the user to log in.
Perhaps it should be kept in the kernel in the process group,
so all processes in a process group can use the token?
- Dan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/