Univention Bugzilla – Full Text Bug Listing |
Summary: | ID mapping range for "*" is not configurable | ||
---|---|---|---|
Product: | UCS | Reporter: | Jens Thorp-Hansen <thorp-hansen> |
Component: | Samba | Assignee: | Felix Botner <botner> |
Status: | CLOSED FIXED | QA Contact: | Arvid Requate <requate> |
Severity: | normal | ||
Priority: | P5 | CC: | botner, gohmann |
Version: | UCS 4.2 | ||
Target Milestone: | UCS 4.2-0-errata | ||
Hardware: | Other | ||
OS: | Linux | ||
What kind of report is it?: | Bug Report | What type of bug is this?: | 5: Major Usability: Impairs usability in key scenarios |
Who will be affected by this bug?: | 1: Will affect a very few installed domains | How will those affected feel about the bug?: | 5: Blocking further progress on the daily work |
User Pain: | 0.143 | Enterprise Customer affected?: | Yes |
School Customer affected?: | Yes | ISV affected?: | |
Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
Ticket number: | 2017050521000171 | Bug group (optional): | |
Max CVSS v3 score: | |||
Bug Depends on: | |||
Bug Blocks: | 44560 |
Description
Jens Thorp-Hansen
2017-05-05 17:01:01 CEST
This is important for samba memberserver's as the gid/uid<->SID mapping is done via winbind but the default range for the Domain has a range from 1000-54999. As soon as the uidNumber/guiNumber goes beyond 54999 (which is not unlikely in school environments) gid/uid<->SID mapping is broken. added samba/idmap/range (samba/idmap/*/range is not allowed by ucslint :-( ) univention-samba: r79233 staging/univention-samba.yaml Ok, works: ucr set samba/idmap/$(ucr get windows/domain)/range=1000-549999 \ samba/idmap/range=550000-640000 I've added a note to the advisory explaining the purpose of this new variable. |