idmap.rfc2307 flakey

[Ralph Böhme]

On Fri, Dec 08, 2017 at 05:32:32PM +0100, Stefan Metzmacher via samba-technical wrote:
> I found part of the reason why idmap.rfc2307 is flakey.
> 
> The main difference is that the failing version doesn't have the
> domain sids as member of builtin groups.
> 
> $ bin/tdbdump
> /data/tmp/samba-master3.fail/ad_member_rfc2307/lockdir/group_mapping.tdb
> |grep -A1 'MEMBEROF'
> 
> $ bin/tdbdump
> /data/tmp/samba-master3.ok/ad_member_rfc2307/lockdir/group_mapping.tdb
> |grep -A1 'MEMBEROF'
> key(55) = "MEMBEROF/S-1-5-21-1335776168-1709816617-1386263926-513\00"
> data(13) = "S-1-5-32-545\00"
> --
> key(55) = "MEMBEROF/S-1-5-21-1335776168-1709816617-1386263926-512\00"
> data(13) = "S-1-5-32-544\00"
> 
> At join time libnet_join_add_dom_rids_to_builtins() hits the
> NT_STATUS_PROTOCOL_UNREACHABLE case generated by pdb_create_builtin()
> because winbindd is not running yet.

hm, this reminds me of ea0ea829f5af63ab9638e758631c3002cbb6b4ce.

> Can anyone explain how this is supposed to work?
> What's the code patch where this is some times added and some times not???

Sorry, no idea. :(

-slow

-- 
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/