[Samba] -DIdmap_rid_support_trusted_domains

[Michael Gasch]

i'm sorry guenther, just one more question:
are my options correct? because i still get "rid_idmap_get_id_from_sid: 
no suitable range available for sid" and if i set "allow trusted domains 
= yes" winbindd won't idmap at all :( although the flag was set and

#if IDMAP_RID_SUPPORT_TRUSTED_DOMAINS
                 DEBUG(3,("rid_idmap_init: enabling 
trusted-domain-mapping\n"));

should appear (from idmap_rid.c) in winbindd.log

but i get
#else
                 DEBUG(0,("rid_idmap_init: idmap_rid does not work with 
trusted domains\n"));
                 DEBUGADD(0,("rid_idmap_init: please set \"allow trusted 
domains\" to \"no\" when using idmap_rid\n"));
                 return nt_status;

???

thx again


Guenther Deschner wrote:
> Hi Michael,
> 
> On Wed, Oct 26, 2005 at 04:21:15PM +0200, Michael Gasch wrote:
> 
>>hi,
>>
>>i have a question about winbind, idmap_rid and trusted domains. at 
>>sambaxp jerry said it's possible to have idmap_rid working with trusted 
>>domains. this is what we would like to have here.
> 
> 
> Please, please, please just experiment with that when you exactly know
> what you are doing.
> 
> 
>>smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be 
>>this is normal, but how do i ensure that this option is in my binary w/ 
>>testing too much :) or how can i compile it myself? will this work only 
>>on samba >3.0.14a or with all samba versions that are shipped with 
>>idmap_rid support?
> 
> 
> This will work with all versions.
> 
> Simply put it into the CFLAGS before compiling
> 
> CFLAGS="-DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS" ./configure --your-opts && make 
> 
> Guenther
> 
> BTW: The packages available at ftp://ftp.suse.com/pub/projects/samba all
> have this flag set.


-- 
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany

Phone: 49 (0)341 - 3550 137