[Samba] Re: AD domain with SDMS issues & LDAP Idmap backend

[Rex Dieter]

Vijay Avarachen wrote:
> Ok WTF... idmap is getting populated in OpenLDAP now. :-) I just took a sh*t
> load of time....and turns out I was wrong about the headcount in AD, its not
> 8000+ its close to 40,000+ YIKES! 

You could consider using these in smb.conf:  (comments mine)

## WARNING: winbind enum ( = yes) can take a *long* time on a
## large domain! -- Rex
winbind enum users = no
winbind enum groups = no

-- Rex