On Nov 29, 2005, at 10:56 AM, Justin Krisko wrote:
The reason I could read group membership in panther was because of
the way
it pulled down the group info directly and stored them in the
ADGroupCache.plist - which ironically bypassed the security the AD
admins
had setup! Also interesting is that by default any user can read group
membership of a domain admin - should have seen their faces when I
showed
them that :)
Good catch. I can't tell you how many people had nothing but
heartache because of the old style GroupCache. We are going to be
much better off with memberd.
I really should have worked all this out a lot sooner......
Heh. I think we can all say that about any number of things at work. :-)
