Bug 1482926 - 'realm join' adds deprecated parameter to the Samba config file
Summary: 'realm join' adds deprecated parameter to the Samba config file
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: realmd
Version: 27
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Sumit Bose
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1484072
TreeView+ depends on / blocked
 
Reported: 2017-08-18 12:45 UTC by Andreas Schneider
Modified: 2018-07-05 08:45 UTC (History)
3 users (show)

Fixed In Version: realmd-0.16.3-13.fc29
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1484072 (view as bug list)
Environment:
Last Closed: 2018-07-05 08:45:26 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Andreas Schneider 2017-08-18 12:45:36 UTC
Description of problem:

The command

  realm join --client-software=winbind

creates and outdated Samba configuration. It adds the following parameters to the  [global] section of the smb.conf file:

  idmap backend = tdb
  idmap gid = 10000-2000000
  idmap uid = 10000-2000000

Those have been deprecated and replaced. Also it should use the rid backend for the domain it joined. The config should look like this:

  idmap config * : range = 1000000-1999999

  idmap config DOMAIN : backend = rid
  idmap config DOMAIN : range = 100000000-199999999

where the DOMAIN is the domain name realm joined the machine too.



This needs to be fixed in RHEL7 too!


Note You need to log in before you can comment on or make changes to this bug.