Yes, ephemeral IDs are temporary representations of Security Identifiers (SIDs). The idmapd(1m) daemon maintains these in a cache, with time-to-live (TTL) based expiration. There's a library API for turning an ephemeral ID back into a SID - see: idmap_get_sidbyuid http://src.illumos.org/source/xref/illumos-gate/usr/src/lib/libidmap/common/idmap_api.c Thanks very much for that confirmation, really doesn't seem obvious in a lot of the documentation! I don't have a system handy to test today (will do over the weekend) but I'll try and get a better idea of how that works over the weekend (in particular after a reboot, what UID/GID will a file/folder show (ie. with ls) until the same user logs in again and the new ephemeral mapping is created?).
Thanks again, James. _______________________________________________ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
