[Samba] idmap LDAP branch never populates with Samba 3.4.1 - how do I debug ?
prynhart at gmail.com
Sun Oct 11 15:09:09 MDT 2009
Thank you for your email. I'm building Samba 3.4.1 on CentOS 5.3.
I agree that my syntax isn't quite right for Samba 3.4.X. However,
looking into this matter further, I now believe that something deeper is
going wrong as I have noted the following the in logs:
Error trying to resolve symbol 'init_samba_module' in
/usr/lib/samba/idmap/ldap.so: /usr/lib/samba/idmap/ldap.so: undefined
To that end:
strings /usr/lib/samba/idmap/ldap.so | grep init_samba_module
returns no result.
However, an init_samba_module entry point *is* defined for all of the
other idmap modules in this directory (i.e. adex.so, ad.so, hash.so,
ldap.so, rid.so, tdb2.so). (i.e. if I run the above command for the
other modules then I get a result for the Samba entry point)
Looks like a broken ldap.so module :-/ Where to from here!?
Thanks & Regards,
Miguel Medalha wrote:
>> I've followed the instructions at
> What version of Samba are you using?
> The wiki page you quote is now in need of urgent update. Quoting from
> the Samba 3.3.0 release notes:
> Winbind idmap backend changes =============================
> The idmap configuration has changed with version 3.3 to something that
> allows a smoother upgrade path from pre-3.0.25 configurations that use
> "idmap backend". The reason for this change is that to many, also to
> Samba developers, the 3.0.25 style configuration with "idmap config"
> turned out to be very complex. Version 3.3 no longer deprecates the
> "idmap backend" parameter, instead with "idmap backend" the default
> idmap backend is specified.
> Accordingly, the "idmap config : default = yes" setting is no longer
> being looked at.
> The alloc backend defaults to the default backend, which should be able
> to allocate IDs. In the default distribution the tdb and ldap backends
> can allocate, the ad and rid backends can not. The idmap alloc range is
> now being set with the "old" parameters "idmap uid" and "idmap gid". The
> "idmap domains" parameter has been removed.
> Release note here:
More information about the samba