[Samba] RID idmap backend: difficulties looking up a user by its uid
Jakob Ahlin
jakob at hjolug.org
Wed Aug 12 12:44:20 MDT 2009
Thanks for your answer, Dale. You were right, I had that line wrong.
However, I think it just affected what uids the users would get, because
the problem remains.
I have configured the TDB, LDAP and AD backends successfully; only the
RID backend gives me the problem I explained in my original message.
I tried using the "idmap config" directive as well...
idmap backend = tdb
idmap uid = 1000000-1000010
idmap gid = 1000000-1000010
idmap config WBLABB : backend = rid
idmap config WBLABB : range = 10000 - 1000000
winbind use default domain = yes
...with the same result, i.e I need to retrieve the "passwd" entry by
username before I can do the reverse.
Jakob
Dale Schroeder wrote:
> I believe smb.conf line should be
> idmap backend = rid:DOMAIN=100000-10000000
>
> Dale
>
>
> Jakob Ahlin wrote:
>> Hi,
>>
>> I'm having a problem using the RID idmap backend with Winbind. Having
>> configured NSS with the Winbind module, I can use "getent passwd" to
>> look up a user by its username, but not by its uidnumber. However, if
>> I first do a lookup using the username or run wbinfo on the user
>> (specifying either the username or uid), and then try "getent passwd"
>> with the uidnumber, I get the correct result.
>>
>> See here:
>> debianrid:~# getent passwd 161907
>> debianrid:~# wbinfo --uid-info 161907
>> lokr:*:161907:100513:Lovisa Kristiansson
>> (lokr):/home/WBLABB/lokr:/bin/sh
>> debianrid:~# getent passwd 161907
>> lokr:*:161907:100513:Lovisa Kristiansson
>> (lokr):/home/WBLABB/lokr:/bin/sh
>> debianrid:~#
>>
>> Related smb.conf lines:
>> idmap backend = rid
>> idmap uid = 100000-10000000
>> idmap gid = 100000-10000000
>> winbind use default domain = yes
>> winbind enum groups = yes
>> winbind enum users = yes
>>
>> Version information:
>> Version 3.3.7-SerNet-Debian
>>
>> From log.winbindd-idmap:
>> [2009/08/12 10:13:58, 0] lib/module.c:do_smb_load_module(69)
>> Module '/usr/lib/samba/idmap/rid.so' initialization failed:
>> NT_STATUS_OBJECT_NAME_COLLISION
>> [2009/08/12 10:13:58, 1] winbindd/idmap.c:idmap_alloc_init(580)
>> could not find idmap alloc module rid
>>
>> Any ideas?
>>
>> Regards,
>> Jakob
>>
More information about the samba
mailing list