On 9/21/18 7:53 PM, Beale (US), Gareth wrote:
Due to the large number of users and groups in our LDAP directory, and the limitations of some legacy Unix systems, we have some large groups that have been broken into “sub-groups” with the same GID but an incremental suffix.
I'd consider this to be broken data.
I don’t believe this is an uncommon solution,
Frankly I never saw this. Personally I'd consider this to be rather uncommon.
and it has worked fine for many years.
Your systems really handled full group lookups by GID correctly? How?
Ciao, Michael.