Hi,
I've noticed a discrepancy between Samba Version 3.0.28a and Version
3.0.24 in relation to Winbind rid idmap and trusted domains behaviour.
I have an environment with 2 domains linked via a trust, an Active
Directory domain and an NT4 domain. On 3.0.24 the rid backend seems to
work fine, but on 3.0.28a it shows OTHERDOMAIN\domain admins instead of
the primary domain's domain admins in uid/name mapping on files.
Below is a relevant snippet of the identical samba configuration on both
machines:
allow trusted domains = no
idmap backend = rid
idmap config PRIMARYDOMAIN:range = 10000-19999
idmap config OTHERDOMAIN:range = 20000-29999
idmap gid = 10000-30000
idmap uid = 10000-30000
Testparm confirms that allow trusted domains is set to No, so it seems
that 3.0.28a does not respect the fact that trusted domains are not
supposed to be allowed at all? This seems to break the way the rid
backend works of course as there is a rid clash with the other domain.
This output from wbinfo --group-info shows the name clash:
domain admins:x:10512
OTHERDOMAIN\domain admins:x:10512
Can anyone offer any advice on what to do about this?
I am running 3.0.24 on Debian Etch and 3.0.28a on Gentoo, for which
those are the latest stable versions packaged for the systems. I have
tried 3.0.32 and the problem seems to occur there too. Is this a bug
that has crept in after 3.0.24?
-h
--
Hari Sekhon
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
