winbind mapping depuration

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nahuel Greco wrote:

| Is possible to create an script that (for users
| and groups):
...
It is possible but that is not the problem.  The algorithm for
allocating the next id uses a high water mark that is
monotonically increasing.

| And, on the other side: How Windows handle this situation?
| What happen when you remove an user on a Windows PDC if there
| are files on the workstations owned by that user or ACLs
| with references to him? How these references are removed
| from the Workstations? Is done automatically? How?

SIDs are never reused on Windows.  File ownership is really
irrelevant.   so while it is possible to exhaust the uid/gid
on space on a linux box with 32-bit ids, it is rarely done
using as single domain.  It is more possible using noe or
more trusted domains.





cheers, jerry
- ----------------------------------------------------------------------
Hewlett-Packard            ------------------------- http://www.hp.com
SAMBA Team                 ---------------------- http://www.samba.org
GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAJ9lgIR7qMdg1EfYRAkM6AJ9oa8L4YaPbv1Hsu8EgfszcqcWvxgCeIwAe
2J6H5Xxw1wQ9M+jHBxSgAVU=
=cnZI
-----END PGP SIGNATURE-----