i'm sorry guenther, just one more question:
are my options correct? because i still get "rid_idmap_get_id_from_sid:
no suitable range available for sid" and if i set "allow trusted domains
= yes" winbindd won't idmap at all :( although the flag was set and
#if IDMAP_RID_SUPPORT_TRUSTED_DOMAINS
DEBUG(3,("rid_idmap_init: enabling
trusted-domain-mapping\n"));
should appear (from idmap_rid.c) in winbindd.log
but i get
#else
DEBUG(0,("rid_idmap_init: idmap_rid does not work with
trusted domains\n"));
DEBUGADD(0,("rid_idmap_init: please set \"allow trusted
domains\" to \"no\" when using idmap_rid\n"));
return nt_status;
???
thx again
Guenther Deschner wrote:
Hi Michael,
On Wed, Oct 26, 2005 at 04:21:15PM +0200, Michael Gasch wrote:
hi,
i have a question about winbind, idmap_rid and trusted domains. at
sambaxp jerry said it's possible to have idmap_rid working with trusted
domains. this is what we would like to have here.
Please, please, please just experiment with that when you exactly know
what you are doing.
smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be
this is normal, but how do i ensure that this option is in my binary w/
testing too much :) or how can i compile it myself? will this work only
on samba >3.0.14a or with all samba versions that are shipped with
idmap_rid support?
This will work with all versions.
Simply put it into the CFLAGS before compiling
CFLAGS="-DIDMAP_RID_SUPPORT_TRUSTED_DOMAINS" ./configure --your-opts && make
Guenther
BTW: The packages available at ftp://ftp.suse.com/pub/projects/samba all
have this flag set.
--
Michael Gasch
Max Planck Institute for Evolutionary Anthropology
Department of Human Evolution (IT)
Deutscher Platz 6
D-04103 Leipzig
Germany
Phone: 49 (0)341 - 3550 137
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
