gasch at eva.mpg.de
Wed Oct 26 14:35:13 GMT 2005
ok, one step further:
idmap backend = idmap_rid:DOMA=10000-20000,TRUSTDOMB=20001-30000
idmap uid = 10000-30000
idmap gid = 10000-30000
winbind enum users = no
winbind enum groups = no
template shell = /bin/bash
allow trusted domains = no
winbind trusted domains only =no
winbind use default domain = yes
id user (from DOMA) gives a UIDNumber (according to idmap range).
id TRUSTDOMB\user gives
[ 978]: sid to uid S-1-5-21-3912345646-894196617-3681078760-4070
rid_idmap_get_id_from_sid: no suitable range available for sid:
i think the compile time option -DIdmap_rid_support_trusted_domains is
still missing, but how to find this out or how to enable it?
Michael Gasch wrote:
> i have a question about winbind, idmap_rid and trusted domains. at
> sambaxp jerry said it's possible to have idmap_rid working with trusted
> domains. this is what we would like to have here.
> smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be
> this is normal, but how do i ensure that this option is in my binary w/
> testing too much :) or how can i compile it myself? will this work only
> on samba >3.0.14a or with all samba versions that are shipped with
> idmap_rid support?
> thx for your help in advance!
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
Phone: 49 (0)341 - 3550 137
More information about the samba