CVS update: samba/source/groupdb

[Luke Kenneth Casson Leighton]

On Sat, 16 Jan 1999, Jeremy Allison wrote:

> matty at samba.anu.edu.au wrote:
> 
> > * Added new APIs for modifying groups.
> > * RIDs are allocated similarly to NT, starting from 1000 and incrementing by 1
> 
> Errr. Warning !!! Have you decoupled the UNIX uids from
> the rids ? This would be a baaaad thing..
> 
> Remember, we're not a NT PDC, we're a UNIX server *pretending*
> to be an NT PDC. UNIX uid's must take precedence (principle
> of least suprises to the UNIX admin).

jeremy,

as long as matt deals with the lookup routines in such a way that the
structure that contains uid and rid (or gid and rid) has _both_ values
filled in properly, then it doesn't matter what the scheme is: this
satisfies both criteria (the important one being UNIX uids but if that can
be satisfied _and_ the NT one satisfied too, then all the better).

for the smbpasswd scheme, we use the mathematical system to provide
monotonic lookups.

for the ldap scheme, as long as it's monotonic and like you say unix
security is handled correctly, the lookup method isn't critical.