idra at samba.org
Tue Oct 3 18:58:01 GMT 2006
On Tue, 2006-10-03 at 20:50 +0200, Volker Lendecke wrote:
> No, I don't see how this can work. Use idmap_rid for this
> setup. What about the SIDs from ADOM that B sees and Samba
> server A happened to never have seen and thus has not put in
> mappings for? This is the admin chaos I talked about.
Btw, I am not particularly attached to the multiple allocation ranges
idea. But it has to do with the "getting things right" approach.
If it is considered to complex I agree we can decide to not support such
a thing. But I think this would be more a purposeful limitation than an
In any case we have to deal with the case the user want to use idmap_rid
and no allocation is possible at all even for BUILTIN (there are systems
where nss is simply not available).
Samba Team GPL Compliance Officer
email: idra at samba.org
More information about the samba-technical