[PATCH] winbindd: lookup-domain for well-known SIDs on a DC

[Rowland Penny]

On Mon, 03 Apr 2017 15:23:40 +0200
Andreas Schneider <asn at samba.org> wrote:

> On Saturday, 1 April 2017 20:33:04 CEST Rowland Penny via
> samba-technical wrote:
> > On Sat, 1 Apr 2017 19:05:11 +0200
> > 
> > Ralph Böhme <slow at samba.org> wrote:
> > > > The group names in 'WELL_KNOWN_SIDS' start with forward
> > > > slashes, is there something in the code somewhere that turns
> > > > then into the required backslashes ?
> > > 
> > > $ git grep "winbind separator" selftest/
> > > 
> > > :)
> > 
> > Ah, I get it, set the winbind separator to '/' to get around the
> > backslash in a script problem, very smart :-)
> 
> No, it isn't. / is the path separator. So if you do path
> substitutions like:
> 
> path = /foo/%u or setting 'template dir' you have some fun.
> 
> 
> 	Andreas
> 
> 

OH, yes it is ;-)

if you do the grep that Ralph supplied, you will get this:

selftest/selftest.pl:597:        winbind separator = /
selftest/target/Samba3.pm:1476:	winbind separator = /
selftest/target/Samba4.pm:563:	winbind separator = /

So the tests get run with the winbind separator set to '/'. if you
didn't do this, you would have to add something like this to Ralph's
script:

NAME=$(echo "$NAME" | sed 's|/|\\|g')

You cannot use something like '\EVERYONE 5' in the WELL_KNOWN_SIDS, you
would just end up with 'VERYONE 5'

Rowland