[SCM] Samba Shared Repository - branch v3-6-test updated
Karolin Seeger
kseeger at samba.org
Wed Jun 19 02:59:29 MDT 2013
The branch, v3-6-test has been updated
via 006ba0c docs: mention AD prerequirements for using idmap_ad
via 1779473 winbind/idmap_ad: be verbose about the user that we fail to map
from 1f601d1 Ensure we test the dirsort module in make test.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-6-test
- Log -----------------------------------------------------------------
commit 006ba0cc73a3fe484452f594a25dd3bfee9b39fd
Author: Björn Jacke <bj at sernet.de>
Date: Wed May 15 15:52:25 2013 +0200
docs: mention AD prerequirements for using idmap_ad
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from commit c3057f69a274f0d8e0e66183bd5e8be7703b6750)
Reviewed-by: David Disseldorp <ddiss at samba.org>
The last 2 patches address bug #9880 - Use of wrong RFC2307 primary group field.
commit 17794737fedf095212cf45920dd1e29b5a1a9fa0
Author: Björn Jacke <bj at sernet.de>
Date: Tue May 14 16:51:28 2013 +0200
winbind/idmap_ad: be verbose about the user that we fail to map
Reviewed-by: Stefan Metzmacher <metze at samba.org>
(cherry picked from commit f08205be7003f6c0a15fd5fd99d01951164ad15c)
Reviewed-by: David Disseldorp <ddiss at samba.org>
-----------------------------------------------------------------------
Summary of changes:
docs-xml/manpages-3/idmap_ad.8.xml | 9 ++++++---
source3/winbindd/idmap_ad.c | 5 +++--
2 files changed, 9 insertions(+), 5 deletions(-)
Changeset truncated at 500 lines:
diff --git a/docs-xml/manpages-3/idmap_ad.8.xml b/docs-xml/manpages-3/idmap_ad.8.xml
index fbadaf2..2f7c0f1 100644
--- a/docs-xml/manpages-3/idmap_ad.8.xml
+++ b/docs-xml/manpages-3/idmap_ad.8.xml
@@ -22,9 +22,12 @@
id mappings from an AD server that uses RFC2307/SFU schema
extensions. This module implements only the "idmap"
API, and is READONLY. Mappings must be provided in advance
- by the administrator by adding the posixAccount/posixGroup
- classes and relative attribute/value pairs to the user and
- group objects in the AD.</para>
+ by the administrator by adding the uidNumber attributes for
+ users and gidNumber attributes for groups in the AD. Winbind
+ will only map users that have a uidNumber and whose primary
+ group have a gidNumber attribute set. It is however
+ recommended that all groups in use have gidNumber attributes
+ assigned, otherwise they are not working.</para>
<para>
Note that the idmap_ad module has changed considerably since
diff --git a/source3/winbindd/idmap_ad.c b/source3/winbindd/idmap_ad.c
index cf15f03..2b35a4f 100644
--- a/source3/winbindd/idmap_ad.c
+++ b/source3/winbindd/idmap_ad.c
@@ -457,7 +457,7 @@ again:
ctx->ad_schema->posix_gidnumber_attr,
&id))
{
- DEBUG(1, ("Could not get unix ID\n"));
+ DEBUG(1, ("Could not get SID for unix ID %u\n", (unsigned) id));
continue;
}
@@ -654,7 +654,8 @@ again:
ctx->ad_schema->posix_gidnumber_attr,
&id))
{
- DEBUG(1, ("Could not get unix ID\n"));
+ DEBUG(1, ("Could not get unix ID for SID %s\n",
+ sid_string_dbg(map->sid)));
continue;
}
if (!idmap_unix_id_is_in_range(id, dom)) {
--
Samba Shared Repository
More information about the samba-cvs
mailing list