I think idmap is the right place. we should move it from nsswitch to an own directory and make it plugable. (See Roadmap of 3_0: it is needed)

And let it map sid -> u/gids and u/gids -> sid.

Maybe let it hold two contexts:

1. for all trusted domains (and our domain if we are a member server)
uses
winbind uid =
winbind gid =

to export mapping to unix (nss_winbind) and samba

2. for our local sam (witch is also the domain sam if we are a DC)
uses
idmap uid =
idmap gid =

to export mappings to samba (and maybe later also to unix via winbind)


metze
-----------------------------------------------------------------------------
Stefan "metze" Metzmacher <[EMAIL PROTECTED]>

Reply via email to