[Samba] Re: winbind: authenticating UNIX user before Win Domain user

[Matt Seitz]

Luke Mewburn wrote:
  > I have the same requirement; except samba can't currently do this.  See:
>   http://lists.samba.org/archive/samba/2004-October/094981.html
> 
> I implemented a "trim default domain" option and provided a patch in:
>   http://www.dragoninc.on.ca/mail-archives/samba-technical/2004-10/0342.html

What about the following scenario?

1.  User1 is not in NIS.
2.  DOMAIN\User1 logs into Samba
3.  Winbind creates UID for User1
4.  NIS administrator then adds User1 to NIS

It appears you could end up with conflicting UIDs for User1, unless Winbind 
automatically added the user to NIS at the same time.