[PATCH] Check idmap config with testparm

Jeremy Allison jra at samba.org
Wed Dec 7 23:16:19 UTC 2016


On Wed, Dec 07, 2016 at 06:43:35PM +0100, Andreas Schneider wrote:
> Hello,
> 
> you might know I work for a Distributor and fix winbind issues there every 
> day.
> I see so many invalid idmap configurations, I think 70% of the configs are 
> wrong or invalid. In addition our documentation for ID mapping really sucks! 
> So I had a call with Marc and he started to improve it. See the User 
> documentation in the Wiki.
> 
> While trying to chase down a winbindd bug the last days I read all the changes 
> last year and stumbled upon Volkers nice lp_wi_scan_global_parametrics() 
> function again. So I decided it is time to check the idmap config in testparm. 
> 
> So here we go ...
> 
> 
> <config>
>         idmap config * : backend = rid
>         idmap config * : range = 1000000-1999999
> 
>         # Winbind domain idmap
>         idmap config EARTH : backend = rid
>         idmap config EARTH : range = 100000000-199999999
> 
>         idmap config MARS : backend = rid
>         idmap config MARS : range = 200000000-299999999
> 
>         idmap config VENUS : backend = rid
>         idmap config VENUS : range = 150000000-399999999
> </config>
> 
> <console>
> bin/testparm smb.conf.ads > /dev/null
> Load smb config files from smb.conf.ads
> 
> ERROR: Do not use the 'rid' backend for the default backend (idmap config *)!
> 
> ERROR: The idmap range for the domain MARS overlaps with the range of VENUS
> 
> Server role: ROLE_DOMAIN_MEMBER
> 
> Press enter to see a dump of your service definitions
> </console>
> 
> Review and push of the attached patchset is much appreciated!

Woo Hoo ! *Fantastic* work Andreas, thanks !

Would you consider squashing in the following patch on top,
to prevent a "ERROR:" message in the standalone server
case (where idmap config should be ignored) ?

With that : Reviewed-by: Jeremy Allison <jra at samba.org>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-SQUASHME-Only-check-idmap-backend-when-not-a-standal.patch
Type: text/x-diff
Size: 1337 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20161207/f371bb29/0001-SQUASHME-Only-check-idmap-backend-when-not-a-standal.diff>


More information about the samba-technical mailing list