[PATCHES] authenticating users during short disconnects from AD

[Volker Lendecke]

On Wed, Dec 28, 2016 at 02:54:38PM +0200, Uri Simchoni wrote:
> #2 - we optimistically try sid2xid with type unspecified, The question
> is what to do if that fails - resolve the SIDs only for that call or for
> all later calls? Making a mental note that this backend needs sid lookup
> before mapping is good for backends which require this by their nature,
> such as rfc2307 - avoid the double lookup. OTOH some backends only need
> the SID type for allocation of new SIDs, so avoiding the "mental note"
> might result in better offline operation with those backends.

Hmm. Right. It's only for new IDs. Maybe it is in fact better to
always do the double-roundtrip. Need to think about that a bit more.

Volker