idmap_rid Backend

[Sven Oehme]

Hi,

simo <idra at samba.org> wrote on 08/10/2007 03:01:53 PM:

> On Fri, 2007-08-10 at 10:03 +0200, Sven Oehme wrote:
> > 
> > Hi Simo, 
> > 
> > i installed a bigger Samba Cluster today and used the rid back-end . I
> > finally got it Setup, but some comments from my side .. 
> > 
> > First, why do i have to specify the UID and GID range twice ? 
> 
> Don't think that's necessary, do you have problems removing the first
> 2 ?
> 

when i remove winbind uid and winbind gid it din't work .. 
i have no longer access to this box to test it again and send a log, sorry 


> >         #70000-150000 
> > -->        winbind uid = 70000-200000 
> > -->        winbind gid = 70000-200000 
> >         winbind enum groups = no 
> >         winbind enum users = no 
> > 
> >         idmap domains = DOM1 DOM2 
> > 
> >         idmap config DOM1:backend      = rid 
> >         idmap config DOM1:base_rid     = 1000 
> > -->        idmap config DOM1:range        = 70000 -149999 
> >         idmap config DOM2:backend  = rid 
> >         idmap config DOM2:base_rid = 1000 
> > -->       idmap config DOM2:range    = 150000 - 199999 
> > 
> > 
> > next thing is, if you use the config above (which is basically a copy
> > and past from man idmap_rid) it will not work as the base_rid in the
> > man page starts with 1000, but domain users for example is 513, so he
> > tries to resolve this one and fails as it is filtered out : 
> 
> Ok I will have to change the man page, seem that people just copy out
> examples without paying much attention.
> 

i think that makes it easier ;-)

> > [2007/08/10 08:49:57, 5]
> > nsswitch/idmap_rid.c:idmap_rid_sid_to_id(128) 
> >   Requested id (69513) out of range (70000 - 149999). Filtered! 
> > 
> > i think the first issue is a more cosmetic thing but worth to change
> > as it is not clear to my why you have to specify the range two times. 
> > The Documentation thing should definitive be changed as anybody
> > without deeper knowledge will hit that trap :-) 
> 
> Thanks for reporting,
> Simo.

np see you at google ...

> 
> -- 
> Simo Sorce
> Samba Team GPL Compliance Officer
> email: idra at samba.org
> http://samba.org
>