[PATCH] New idmap backend that generates id's the way OS X does

Ralph Böhme slow at samba.org
Tue Sep 20 16:54:20 UTC 2016


Hi John

On Tue, Sep 20, 2016 at 07:13:51AM -0700, John Hixson wrote:
> I wrote this for FreeNAS and want to know if you guys can use it?

Does this actually work at all? To me it looks like in
idmap_fruit_unixids_to_sids() you're missing to prime the synthesized
SIDs in the struct id_map array.

I also thought about adding such an idmap module before but I always
choke at the point where I realized that this can cause collisions and
it doesn't support idmap number ranges, so it can generate mappings
with xids from other idmap backends.

What do you do for two sids

01020304-a390-44b3-a658-1e0623d09332
01020304-90ed-4dd2-9cdc-c21b21aace2d

Or

00000000-90ed-4dd2-9cdc-c21b21aace2d

This user will be happy to be running as the root user.

And afaict

    idmap config * : backend = tdb
    idmap config * : range = 10000-19999
    idmap config FOO : backend = fruit
    idmap config FOO : range = 20000-4294967295

won't really work as it should as idmap_fruit doesn't work this way,
but we need an allocating idmap backend as the default backend.

-slow



More information about the samba-technical mailing list