winbindd_idmap.tdb recovery

[Tim Potter]

On Fri, Feb 08, 2002 at 11:07:42PM +0100, Jean Francois Micouleau wrote:

> > At least on HP-UX, uid_t is a 32bit unsigned integer, capable of handling
> > the entire rid space from win2k...
> > Why map at ALL? just USE the rid comming back from the Win2k server, and
> > only map if there is a conflict with a local uid?  Or are most other UN*X
> > implementations more limited to their uid space?
> 
> you can't as soon as you add trust relationships to the equation.
> 
> tridge's idea was to reserve 6 or 7 bits for the domain and the 32-(6 or
> 7) bits left for the rid.

This is kind of how it is done in NT.  One of the lsa queryinfopolicy
levels returns a posix offset to which you add the rid to get the
uid/gid for that user or group.  It's pretty wasteful of space and there
is no policy for resolving overlaps.


Tim.