Design flaw winbindd idmapping?

[simo]

Can't you just use the values set in ad ?
I do not see where the conflict lies.

Can you give an example?

Simo.

On Wed, 2006-07-12 at 22:09 -0500, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Guys,
> 
> I was thinking about winbind's nested group support and 
> the idmap_ad plugin.  Seems to me that the two are incompatible.
> What we need is a a gid range winbindd can use for groups and
> then query AD for domain users and groups.  Make sense?
> 
> 
> 
> 
> cheers, jerry
> =====================================================================
> Samba                                    ------- http://www.samba.org
> Centeris                         -----------  http://www.centeris.com
> "What man is a man who does not make the world better?"      --Balian
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (GNU/Linux)
> Comment: For info see http://quantumlab.net/pine_privacy_guard/
> 
> iD8DBQFEtblkIR7qMdg1EfYRAofBAJ4rdYgALfmyobVr8jlYobqPMfONBACdEWkq
> 5ptATgKRF5JMPUxGsnUxisk=
> =lX4N
> -----END PGP SIGNATURE-----
-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org