[Stephen Gallagher]
The problem with using UID_MIN is that there are still a lot of (BAD)
deployments out there that are doing things like setting an admin's
primary GID to 10 (wheel) in LDAP so that they're admin on all the
client machines. So even if UID_MIN is 500, we'd still hit filtering
problems.
This could be avoided by providing a separate limit for groups, which
could be lower than the one for users. Minimum group id could be 1
while minimum user id could be 500.
Happy hacking,
--
Petter Reinholdtsen