[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-3016-ga2c3131

Karolin Seeger ks at sernet.de
Tue Sep 16 12:44:56 GMT 2008


On Tue, Sep 16, 2008 at 12:41:03PM +0000, simo wrote:
> Sure, but unless it is reproducible it will be difficult.
> Can you reset the idmap database but not group mapping between tests and
> see if that way you are able to repeat the issue on a clean server?
> > That might be posiible. I didn't remove the group_mapping.ldb file each time.
> > Maybe it happened therefore. But I still think it's strange that the mapping of
> > BUILTIN+Administrators was created after the first execution of 'id' and
> > the initial groupmembership changed due to that later on...
> BUILTIN+Administrators is created by allocating an id from idmap. If you
> reset the idmap database but not the group mapping, that id will be made
> available again to the idmap backend that will allocate it to the first
> request.
> Because the group mapping database has already a BUILTIN+Administrators,
> it does not ask for an id that is instead consumed for the first SID of
> the ADS domain.
> I think that's why you may get the result you got.

I tried to reproduce on a clean server and it doesn't happen again. So I
think everything works fine and it was due to inconsistent information.

Sorry for the noise!


SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.SerNet.DE, mailto: Info @ SerNet.DE

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20080916/cadf4b99/attachment.bin

More information about the samba-technical mailing list