Description Felix Botner 2017-05-09 11:34:36 CEST

+++ This bug was initially created as a clone of Bug #44549 +++

The ID mapping range for "*" is not configurable, while the range for the domain ID mapping is. Both should not overlap, but if you set the domain mapping range via: 

# ucr set samba/idmap/<domain>/range='1000-549999'

this happens at once since you _cannot_ set also this:

# ucr set 'samba/idmap/*/range'='550000-640000'

(you would have to change the following snippet from the template):

print '\tidmap config * : backend\t= ldap'
--> print '\tidmap config * : range\t\t= 55000-64000'
print '\tidmap config * : ldap_url\t= ldap://%s' % ' ldap://'.join(ldapserver)
print '\tidmap config * : ldap_user_dn\t= %s' % (admindn)
## print '\tidmap config * : ldap_base_dn\t= cn=idmap,cn=univention,%s' % (ldap_base)

# replacement for deprecated samba/winbind/trusted/domains/only=yes
if configRegistry.get('windows/domain'):
        mydomain=configRegistry['windows/domain'].upper()
        defaultrange = '1000-54999'
        # try uppercase domain, then allow for lowercase, otherwise use defaultrange
        range = configRegistry.get('samba/idmap/%s/range' % mydomain, configRegistry.get('samba/idmap/%s/range' % mydomain.lower(), defaultrange))
        print '\tidmap config %s : backend = nss' % (mydomain, )
        print '\tidmap config %s : range = %s' % (mydomain, range)
        ### </idmap config v6 for Samba 3.6.0>

---------------------------------------------------------------------------------

The template should look like this:

--> default_range = configRegistry.get('samba/idmap/*/range', '55000-64000')
print '\tidmap config * : backend\t= ldap'
--> print '\tidmap config * : range\t\t= %s' % default_range
print '\tidmap config * : ldap_url\t= ldap://%s' % ' ldap://'.join(ldapserver)
print '\tidmap config * : ldap_user_dn\t= %s' % (admindn)
 ## print '\tidmap config * : ldap_base_dn\t= cn=idmap,cn=univention,%s' % (ldap_base)