How can I confirm that idmap_ad is being called?
I've configured Samba with --with-shared-modules=idmap_ad, built and
installed it; the file ad.so is now present in /usr/local/samba/lib/
idmap/
as expected. I then added the following to smb.conf:
idmap backend = tdb
idmap uid = 65536 - 999999
idmap gid = 65536 - 999999
idmap config SU : backend = ad
idmap config SU : schema_mode = rfc2307
idmap config SU : range = 1 - 65535
idmap config WIN : backend = ad
idmap config WIN : schema_mode = rfc2307
idmap config WIN : range = 1 - 65535
Now I fire up winbindd with debug-level = 10, and issue some queries via
wbinfo. Some requests work as expected, some fail, but when I look in
log.winbindd I never see any reference to idmap.c or idmap_ad.c. I'd
like
to confirm that this module is being used.
I went so far as to deliberately break the smb.conf by specifying
idmap config SU range = 1 -
which I expected to produce an error from idmap_ad_initialize(),
"invalid
filter range". But that message is never logged; instead I see only
errors
from winbindd_util.c, add_trusted_domain():
[2011/05/16 16:57:11.442318, 1] winbindd/winbindd_util.c:
204(add_trusted_domain)
invalid range syntax in idmap config SU: 1 -
Have I missed out on some crucial bit of configuration that's required
to
enable idmap_ad?
--
Kai Lanz Stanford University School of Earth Sciences
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
