[Samba] idmap_rid - bug or documentation issue?

[S Murthy Kambhampaty]

I was having some trouble getting identity mapping correct while integrating Samba into a Windows 2003 (pre-R2) environment using the idmap_rid module, that took a while to figure out because of the segfault in 3.0.25a when using the old configuration syntax.  The bottom line is that if the selected base_rid is greater than an AD RID, then identity mapping fails.  It turns out that in our environment the RID for the target group was less than 1000, so the configuration borrowed from the example in the manpage of idmap_rid was incorrect.  Fortunately, there were some domain users that were not in the target group, which, taken together with the fact that the old config syntax in 3.0.24 was producing valid id maps with an implied base_rid of 0, exposed the workaround.  

So the question is whether the example in the manpage can be changed to make base_rid 0.  Come to think of it, what is the purpose of base_rid?

Thanks,
   Murthy 



       
____________________________________________________________________________________Ready for the edge of your seat? 
Check out tonight's top picks on Yahoo! TV. 
http://tv.yahoo.com/