Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Michael Steffens
Hi Michael, Michael Fair wrote: The admin would have to rechown all the files from the old ids to the new ones, but a simple find command could probably manage that. How does that work? Any major wrinkles? I'm not feeling really comfortable with winbind assigning all UIDs and GIDs on a system,

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Michael Fair
Michael Steffens [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Michael, Michael Fair wrote: The admin would have to rechown all the files from the old ids to the new ones, but a simple find command could probably manage that. How does that work? Any major wrinkles?

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Andrew Bartlett
On Thu, 2003-03-13 at 20:29, Michael Fair wrote: Michael Steffens [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] Hi Michael, Michael Fair wrote: The admin would have to rechown all the files from the old ids to the new ones, but a simple find command could probably

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Andrew Bartlett
On Thu, 2003-03-13 at 20:46, Simo Sorce wrote: On Thu, 2003-03-13 at 01:32, Andrew Bartlett wrote: On Thu, 2003-03-13 at 10:38, Michael Fair wrote: I haven't done much work in this are yet so please feel free to correct me as you see fit, but as I understand it, part of the problem we

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Michael Steffens
Hi Michael, Michael Fair wrote: Oh yes, entirely! Nothing I mentioned was an attempt to put winbind in control of all the UID/GIDs on a system. I personally have never used, nor even heard of a system that used UID/GIDs 100,000,000 and above. That's the address space that winbind would be

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Michael Fair
Andrew Bartlett [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I sit in two camps on this one - for local UIDs/GIDs, I actually like the 'algorithmic', but it's confined to a single uid/gid space. For winbindd, I'm convinced that the tdb mapping is the best way forward, but that

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-13 Thread Luke Howard
I hadn't realized that an SID is actually 256 bits and we at best only have 32 bits to work with I I was only thinking about the RIDs). A SID is variable length, really. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com

New approach for winbind to match Windows to UNIX users and back

2003-03-12 Thread Michael Fair
I haven't done much work in this are yet so please feel free to correct me as you see fit, but as I understand it, part of the problem we face is that the equivalents of the UID and a GID in UNIX, are mapped to the same address space in Windows. I was working on some unrelated ACL stuff and

Re: New approach for winbind to match Windows to UNIX users and back

2003-03-12 Thread Michael Fair
Andrew Bartlett [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] I'm going to rearrange the order, because I think there is a second set of problems that can all be addressed together. First: If the groups were published in LDAP, then winbind wouldn't need to do any additional