On Wed, Apr 02, 2008 at 04:56:51PM -0500, Nicolas Williams wrote:
> On Wed, Apr 02, 2008 at 05:22:07PM -0400, Leopold, Corey wrote:
> > What is the expected behavior of CIFS when joined Active Directory and
> > all Active Directory servers become unavailable due to network outage?
> 
> Domain user/group SIDs seen on the wire are mapped to "nobody"
> UIDs/GIDs.  Non-ephemeral UIDs/GIDs are mapped to RIDs relative to the
> server's computer SID.

I forgot to add that this is only true for SIDs/UIDs/GIDs which haven't
been mapped before.  All mappings other than ephemeral mappings do
expire within 5 minutes.

Perhaps we should probably have an option to fallback on expired
non-ephemeral mappings when AD is unreachable.  And perhaps the
expiration time should configurable.  Comments?
_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to