updated newidmap

[Volker Lendecke]

On Tue, Oct 03, 2006 at 10:46:26AM -0400, simo wrote:
> Volker suggested to also change IDmap to always allocate a uid and a gid
> at the same time and not use the lookupsid.

I did not say to not use lookupsid. I said that if it can't
tell then we might allocate both.

> This implies a lot more work outside IDmap I am not willing to make at
> this point (changing the ACL code, dealing with backwards compatibility
> and keeping a mixed situation working, etc..)
> Also removing the lookupsid safeguard will need some other method to
> guard against possible DOSs.

If we agree that this is a necessary thing then I think this
is the right moment to do it.

And I really doubt the additional work is necessary *now*,
but I would be delighted to see it in the design. Basically,
on allocation we would alloc both. Always.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20061003/dcaac2c8/attachment.bin