[Samba] SID history secondary group set bloat

Rowland penny rpenny at samba.org
Thu Jun 10 07:55:39 UTC 2021

On 10/06/2021 08:52, Ralph Boehme wrote:
> Am 10.06.21 um 09:47 schrieb Rowland penny via samba:
>> On 10/06/2021 08:32, Ralph Boehme via samba wrote:
>>> Am 10.06.21 um 08:27 schrieb Weiser, Michael:
>>>> My question remains if there's a way to prevent SID history SIDs from
>>>> being mapped once they're no longer needed on a particular samba
>>>> server, to prevent unnecessary bloating of the secondary group list,
>>>> i.e. if there's a way to tell autorid (or nss) to recognize that
>>>> 472199(EXAMPLE\secret), 572198(EXAMPLE\secret) and
>>>> 301141(EXAMPLE\secret) are all the same group and only add gid 301141
>>>> to the UNIX token.
>>> ah, now I get it. :)
>> Hi Ralph, you might get it, but I don't, care to explain it ?
> of course, but explain what? :)
> -slow

Where he is getting multiple RIDs for the same group from.


More information about the samba mailing list