> Really? Where is your evidence? I don't think I've ever seen one > change except after a reboot. >
The cache TTL for idmap is only 10 minutes from what I've seen ( http://fxr.watson.org/fxr/source/common/idmap/idmap_cache.c?v=OPENSOLARIS ). I read somewhere (sorry, can't find the source at the moment) that while a user is logged in their ephemeral UID won't change, but that may only apply to users logged in via the kernel CIFS server and I can't see anything that suggests that the mappings are returned after the TTL period on the idmap cache. I really don't understand why the ephemeral UIDs are quite so ephemeral (certainly keeping them static between reboots seems a bit of a minimum). Honestly would be willing to put up a respectable bounty if anyone wants to have a go at improving the AD integration! James. _______________________________________________ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss