[Samba] RID idmap backend: difficulties looking up a user by its uid

Jakob Ahlin jakob at hjolug.org
Wed Aug 12 12:44:20 MDT 2009


Thanks for your answer, Dale. You were right, I had that line wrong. 
However, I think it just affected what uids the users would get, because 
the problem remains.
I have configured the TDB, LDAP and AD backends successfully; only the 
RID backend gives me the problem I explained in my original message.

I tried using the "idmap config" directive as well...
   idmap backend = tdb
   idmap uid = 1000000-1000010
   idmap gid = 1000000-1000010

   idmap config WBLABB : backend  = rid
   idmap config WBLABB : range    = 10000 - 1000000
   winbind use default domain = yes

...with the same result, i.e I need to retrieve the "passwd" entry by 
username before I can do the reverse.

Jakob

Dale Schroeder wrote:
> I believe smb.conf line should be
>    idmap backend = rid:DOMAIN=100000-10000000
>
> Dale
>
>
> Jakob Ahlin wrote:
>> Hi,
>>
>> I'm having a problem using the RID idmap backend with Winbind. Having 
>> configured NSS with the Winbind module, I can use "getent passwd" to 
>> look up a user by its username, but not by its uidnumber. However, if 
>> I first do a lookup using the username or run wbinfo on the user 
>> (specifying either the username or uid), and then try "getent passwd" 
>> with the uidnumber, I get the correct result.
>>
>> See here:
>> debianrid:~# getent passwd 161907
>> debianrid:~# wbinfo --uid-info 161907
>> lokr:*:161907:100513:Lovisa Kristiansson 
>> (lokr):/home/WBLABB/lokr:/bin/sh
>> debianrid:~# getent passwd 161907
>> lokr:*:161907:100513:Lovisa Kristiansson 
>> (lokr):/home/WBLABB/lokr:/bin/sh
>> debianrid:~#
>>
>> Related smb.conf lines:
>>   idmap backend = rid
>>   idmap uid = 100000-10000000
>>   idmap gid = 100000-10000000
>>   winbind use default domain = yes
>>   winbind enum groups = yes
>>   winbind enum users = yes
>>
>> Version information:
>>   Version 3.3.7-SerNet-Debian
>>
>> From log.winbindd-idmap:
>> [2009/08/12 10:13:58,  0] lib/module.c:do_smb_load_module(69)
>>  Module '/usr/lib/samba/idmap/rid.so' initialization failed: 
>> NT_STATUS_OBJECT_NAME_COLLISION
>> [2009/08/12 10:13:58,  1] winbindd/idmap.c:idmap_alloc_init(580)
>>  could not find idmap alloc module rid
>>
>> Any ideas?
>>
>> Regards,
>> Jakob
>>



More information about the samba mailing list