about new users DnsAdmins & DnsUpdateProxy

Andrew Bartlett abartlet at samba.org
Mon Jul 5 06:33:23 MDT 2010


On Mon, 2010-07-05 at 11:46 +0400, Matthieu Patou wrote:
> Hi metze,
> 
> > Hi Matthieu,
> >
> >> Is it important that the SID is 1101/1102 ? or could it be any sid
> >> available after 1000 ? (chosen by samdb  as the two next available SID ?)
> > No they're not fixed, they're allocated from the rid pool of the first dc
> > (if you let dcpromo also install the DNS-Server). If you don't install
> > DNS, they're not created at all.
> >
> > If the rid pool of the first dc is 1100-1599 they get 1101/1102,
> > if it's 500100-500599 they get 500101/500102.
> Ok that's what I was thinking, the reason why I ask this is that for 
> provision that have lived a little bit this sid are used sometimes and 
> it cause conflict.
> I plan to issue a patch to remove sids when copying missing object if 
> SID >999.--

So this would re-allocate the SID of an object that appears in the
reference provision but not in the original provision?  (That will be
correct)

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100705/5549a4e9/attachment.pgp>


More information about the samba-technical mailing list