Problem with idmap configuration ignoring ldap_base_dn

[John P Janosik]

Hello,

I've been testing the migration of our Samba 3.0.20b domain controllers to
3.0.25b and I think I've found a bug in the new idmap code.  It seems to me
that the code in nsswitch/idmap_ldap.c  that initializes the backend will
always get the value of "ldap suffix" in the case that "ldap idmap suffix"
is not set.  I've put complete details in bugzilla 4772 that I created back
on 7/10.  I've also got the patch that I used to work around this issue
posted.  Can someone take a look at the bug and let me know if I'm on the
right track?  I'd rather not put our new server into production with the
problem solved a different way than future Samba releases.

Thanks,

John Janosik
jpjanosi at us.ibm.com