[PVE-User] UIDs > 65535 not valid in container

[Frank Thommen]

On 3/12/20 5:57 PM, Dietmar Maurer wrote:
>> I fear
>> this might be a container-related issue but I don't understand it and I
>> don't know if there is a solution or a workaround.
>>
>> Any help or hint is highly appreciated
> 
> Yes, we only map 65535 IDs for a single container. We cannot allow
> the full range for security reasons.

What is the security related impact of higher UIDs?  This is kind of a 
showstopper for us, as we planned several such minimal services which 
all need to be able to map all existing UIDs in the AD.

The idea was to move them away from heavy full VMs to more lightweight 
containers.

Frank