On Wed, 2007-10-10 at 14:04 -0500, Gerald (Jerry) Carter wrote:
> > The problem is the idmap domain name at runtime are
> > the string "default domain" instead of the actual doman name,
> > and winbindd cannot find such a "domain" (until I change the doman
> > ame at AD to 'DEFAULT DOMAIN.COM' 8) )
> Nope. This should be equivalent (assuming I don't have typos in
> any option names).
> idmap domains = FOO
> idmap config FOO:backend = rid
> idmap config FOO:read_only = yes
> idmap config FOO:range = 1000-100000
Yep, should. But not.
If "idmap domains" is empty (and I use "idmap backend" instead), then
nsswitch/idmap.c:idmap_init() does not see the name "FOO" at all. It
just prepare the "rid:FOO=1000-100000" and then:
dom->name = "default domain"
dom->params = "FOO=1000-100000"
than rid's init is called etc...
"FOO" does not go to "dom->name". Then winbindd tries to operate with
wrong name, and since there is no the name "default domain" in the
"domain_list()" at all, it fails.