Don't allow RIDs (in our domain) below 1000 (or algorithmic rid base) to be

mapped with the rid algorithm.

Instead, a uid/gid from the UID/GID range will be allocated for this RID.

Andrew Bartlett

source/sam/idmap_util.c

@@ -56,9 +56,14 @@ BOOL idmap_check_rid_is_in_free_range(uint32 rid)
 	if (!idmap_get_free_rid_range(&low, &high)) {
 		return False;
 	}
+	if (rid < algorithmic_rid_base()) {
+		return True;
+	}
+
 	if (rid < low || rid > high) {
 		return False;
 	}
+
 	return True;
 }