Corinna or Pierre please comment? [jason@tishler.net: Re: setuid() problem when disconnected from PDC under 1.3.12-2]

[Pierre A. Humblet]

At 07:24 PM 7/15/2002 +0200, Corinna Vinschen wrote:
>On Mon, Jul 15, 2002 at 11:59:51AM -0400, Jason Tishler wrote:

I agree with everything Corinna wrote (just back from a long trip).
The drawback of implementing a "lenient" version is that, without special 
edits of /etc/group, some site-dependent "mysterious" failures might
happen when disconnected.
Why not use a local account for sshd and cron? 

>> Does anyone know if this information is cached locally by disconnected
>It is for some amount of time.  It's called "cached credentials".
>> boxes?  And if so, is there a (convenient) way to retrieve it?
>Dunno.  It seems only retrievable by logon apps.

Jason, can you telnet into the machine as a domain user when disconnected
from the PDC for a long time? If so are the groups (from id) the same as
when you are connected (working with an /etc/group that includes the domain 
groups)? (just curious).

Pierre