On 9/21/18 7:53 PM, Beale (US), Gareth wrote:
Due to the large number of users and groups in our LDAP directory,
the limitations of some legacy Unix systems, we have some large groups
that have been broken into “sub-groups” with the same GID but an
I'd consider this to be broken data.
I don’t believe this is an uncommon solution,
Frankly I never saw this. Personally I'd consider this to be rather
and it has worked fine for many years.
Your systems really
handled full group lookups by GID correctly? How?