[Samba] Re: idmap_ad: sid to uid conversion fails

[S Murthy Kambhampaty]

--- Luke Howard <lukeh at padl.com> wrote:
> 
> idmap_ad expects RFC 2307 schema (gidNumber and
> uidNumber).
> 
> If you are using the MS SFU schema you'll need to
> change the
> code, should be a simple search and replace.
> 
Ah, I was wondering about that ...

Now that I have though, I get the right GID mapping,
but not the right UID mapping.  

Here's a wild guess:
Regardless of the order in which msSFU30UidNumber and
msSFU30GidNumber are requested, the DC seems to return
them in <GID Number> <UID Number> order.  If idmap_ad
expects the response to be in the order defined in
line 137:
const char *attrs[] = { "sAMAccountType",
"msSFU30UidNumber", "msSFU30GidNumber", NULL };
then it's not getting it, and maybe winbind is seeing
the same UID Number being mapped for all users and
doing an algorithmic mapping?  
Far fetched?  Any ideas what the real problem is?

Thanks,
   Murthy

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com