updated newidmap

[simo]

On Tue, 2006-10-03 at 20:50 +0200, Volker Lendecke wrote:

> No, I don't see how this can work. Use idmap_rid for this
> setup. What about the SIDs from ADOM that B sees and Samba
> server A happened to never have seen and thus has not put in
> mappings for? This is the admin chaos I talked about.

Btw, I am not particularly attached to the multiple allocation ranges
idea. But it has to do with the "getting things right" approach.

If it is considered to complex I agree we can decide to not support such
a thing. But I think this would be more a purposeful limitation than an
increased complexity.

In any case we have to deal with the case the user want to use idmap_rid
and no allocation is possible at all even for BUILTIN (there are systems
where nss is simply not available).

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org