[Samba] idmap backend ad and trusted domains?

[simo]

On Thu, 2006-07-27 at 20:53 +0200, Mark Proehl wrote:
> On Thu, Jul 27, 2006 at 04:57:39PM +0200, Mark Proehl wrote:
> > Hi,
> > 
> > is "idmap backend = ad" with "winbind nss info = sfu" supposed to work
> > with trusted domains?
> > 
> > - Mark
> 
> my problem is this: 
> 
>   vm1:~ # wbinfo -S S-1-5-21-4038355506-4058439304-2375676978-500
>   100003
>   vm1:~ # wbinfo -S S-1-5-21-4038355506-4058439304-2375676978-500
>   100003
>   vm1:~ # wbinfo -S S-1-5-21-450098887-3131224273-1459421348-500
>   Could not convert sid S-1-5-21-450098887-3131224273-1459421348-500 to uid
> 
> both domains are w2k3r2 domains.  Samba is 3.0.23a. I suspect that
> winbind does not follow the ldap referral from it's own dc to the dc
> of the trusted domain. 

Seem this is a known bug:
https://bugzilla.samba.org/show_bug.cgi?id=3661

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org