Bug#368251: [Pkg-samba-maint] Bug#368251: winbind NSS, omitted groups

[Jim Barber]

Steve Langasek wrote:
> On Thu, Mar 01, 2007 at 07:23:45AM +0100, Christian Perrier wrote:
>> As a winbind user, I think that these should be interesting defaults
>> to add to the default smb.conf, yes.
> 
>> We can't do anything for existing configurations. Adding options to an
>> existing smb.conf (during an upgrade) is really too dangerous, imho
>> and fixing this should be left to the local admin (after all,
>> installing a samba server *requires* some skills with samba).
> 
>> So, I propose that, as a side consequence of this bug report, we add
>> both options to th edefgault smb.conf, commented (just like all other
>> default winbind options we provide).
> 
> Do we understand why these are no longer the built-in defaults upstream?

If I were to guess I think maybe for performance reasons at large sites.
The speed difference between executing a 'groups' command with these options on vs off is quite significant I notice.
Maybe at a site with a large number of groups in the Active Directory it may become a problem...