my trip to a big win2k/wk3 forest

[Andreas]

On Thu, Oct 21, 2004 at 01:09:31PM +0200, Volker.Lendecke at SerNet.DE wrote:
> On Tue, Oct 19, 2004 at 11:55:57AM -0300, Andreas wrote:
> > network traffic went through the roof. It turns out KDE was enumerating all
> > groups via getgrent in order to present the user with a nice dialog box with
> 
> This behaviour is broken by design. Notice the change in user admin tools from
> Windows NT to Windows 2000: usrmgr.exe would list *all* users, mmc gives up
> after a server-defined limit, but it does give you nice and handy search
> capabilities.

Actually, KDE would stop after 1000 groups, but that still generated a lot of
traffic and wait.

> > So, executive summary: - I think setting "winbind trusted domains only = yes"
> 
> Another workaround might be 'winbind enum users = no' and 'winbind enum groups

I was trying to avoid that, but it's also a viable option, thanks.