change the default for "winbind expand groups" to "0"

[Björn JACKE]

On 2014-07-24 at 09:30 +0200 Stefan (metze) Metzmacher sent off:
> here's a patch to make winbindd more reliable in environments
> with large and/or trusted domains.
> 
> I'd like to see this included in 4.2.
> 
> I'm sure there're a few open bug reports related to this,
> but I don't have a reference currently.

+1

that change might confuse some people as "getent group" and "id" will return
unexpected results for them but it will fix a lot of setups, also some
commercial Unixes that have lower limits in the size that nsswitch can return.
A verbose mentioning in the release notes should compensate the possible
confusions though :-)

Björn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: Digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20140724/2e3f5bb8/attachment.pgp>