[Samba] enumerating group members with nss_winbind (4.0.9 as AD DC)

[Trent W. Buck]

steve <steve at steve-ss.com> writes:

> Just if I may point out one gotcha with nss_ldapd (nslcd). Those
> objects without classes posixAccount and posixGroup _in the DN of the
> object_ need to be filtered on passwd and group. In a big domain, this
> is slow.

FWIW, not an issue for me -- I only have 250 principals and I don't
expect that to grow by an order of magnitude.