[SSSD] [PATCH] LDAP: Inform about small range size

Lukas Slebodnik lslebodn at redhat.com
Fri Jan 23 13:39:44 UTC 2015


ehlo,

I was reprodicing other bug and it took me some time to find out why I was not
able to resolve user. RID was bigger than range size.

I saw just general message about id mapping failer
[sdap_save_user] (0x0400): Processing user matthewbe
[sdap_save_user] (0x1000): Mapping user [matthewbe] objectSID
    [S-1-5-21-2997650941-1802118864-3094776726-200065] to unix ID
[sdap_idmap_sid_to_unix] (0x0080): Could not convert objectSID
     [S-1-5-21-2997650941-1802118864-3094776726-200065] to a UNIX ID
                                                ^^^^^^
                                        Default range size is 200000
[sdap_save_user] (0x0020): Failed to save user [matthewbe]
[sdap_save_users] (0x0040): Failed to store user 0. Ignoring.


Feel free to propose better debug message. I think it would simplify debugging.

LS
-------------- next part --------------
>From 178b82e54ecb32f4e4a49f508312236570e5af90 Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lslebodn at redhat.com>
Date: Fri, 23 Jan 2015 14:31:02 +0100
Subject: [PATCH] LDAP: Inform about small range size

---
 src/providers/ldap/sdap_idmap.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/providers/ldap/sdap_idmap.c b/src/providers/ldap/sdap_idmap.c
index 0a82e61f788b663e564d68c5d48bb705a33584eb..4a5c6994e16be79469922ad99ec60f59bf7a142c 100644
--- a/src/providers/ldap/sdap_idmap.c
+++ b/src/providers/ldap/sdap_idmap.c
@@ -495,6 +495,12 @@ sdap_idmap_sid_to_unix(struct sdap_idmap_ctx *idmap_ctx,
         ret = ENOTSUP;
         goto done;
         break;
+    case IDMAP_NO_RANGE:
+        DEBUG(SSSDBG_IMPORTANT_INFO,
+              "RID part of objectSID [%s] is bigger than value of option "
+              "ldap_idmap_range_size. You should increase value of range size "
+              "to fix this problem.\n", sid_str);
+    /* FALLTHROUGH */
     default:
         DEBUG(SSSDBG_MINOR_FAILURE,
               "Could not convert objectSID [%s] to a UNIX ID\n",
-- 
2.1.0

-------------- next part --------------
>From 178b82e54ecb32f4e4a49f508312236570e5af90 Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lslebodn at redhat.com>
Date: Fri, 23 Jan 2015 14:31:02 +0100
Subject: [PATCH] LDAP: Inform about small range size

---
 src/providers/ldap/sdap_idmap.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/providers/ldap/sdap_idmap.c b/src/providers/ldap/sdap_idmap.c
index 0a82e61f788b663e564d68c5d48bb705a33584eb..4a5c6994e16be79469922ad99ec60f59bf7a142c 100644
--- a/src/providers/ldap/sdap_idmap.c
+++ b/src/providers/ldap/sdap_idmap.c
@@ -495,6 +495,12 @@ sdap_idmap_sid_to_unix(struct sdap_idmap_ctx *idmap_ctx,
         ret = ENOTSUP;
         goto done;
         break;
+    case IDMAP_NO_RANGE:
+        DEBUG(SSSDBG_IMPORTANT_INFO,
+              "RID part of objectSID [%s] is bigger than value of option "
+              "ldap_idmap_range_size. You should increase value of range size "
+              "to fix this problem.\n", sid_str);
+    /* FALLTHROUGH */
     default:
         DEBUG(SSSDBG_MINOR_FAILURE,
               "Could not convert objectSID [%s] to a UNIX ID\n",
-- 
2.1.0



More information about the sssd-devel mailing list