Dealing with SID history during group mapping?
realrichardsharpe at gmail.com
Fri Jan 9 10:58:51 MST 2015
On Fri, Jan 9, 2015 at 3:26 AM, Jim McDonough <jmcd at samba.org> wrote:
> On Mon, Jan 5, 2015 at 4:02 PM, Richard Sharpe
> <realrichardsharpe at gmail.com> wrote:
>> On Mon, Jan 5, 2015 at 3:45 AM, Jim McDonough <jmcd at samba.org> wrote:
>>> On Tue, Dec 30, 2014 at 6:48 PM, Richard Sharpe
>>> <realrichardsharpe at gmail.com> wrote:
>>>> In dealing with SID history, is it appropriate to make a history SID
>>>> to the same UID as the group it was migrated to?
>>> Sorry, I'm unable to parse this unambiguously yet...sounds like
>>> mapping a group to a UID, so please clarify this.
>> It was a trypo. It should have said 'map a HISTORY SID to the same GID
>> as the group it was migrated to'
>>> mapping historical sids is...well...awful at best.
> My current opinion is no. It was in a trusted domain for some period
> of time, and usually that domain no longer exists. It's not an easy
> question to answer, unfortunately.
Hmmm, I guess I can think of cases where things have changed as well,
so it should really be mapped to a different GID than the one it was
migrated to is mapped to.
More information about the samba-technical