[cifs-discuss] idmap: inconsistent behavior with upper- and lower-case domain names

[Jim Klimov]

> Windows names are case insensitive. Hence *@domain.ru is a duplicate of 
> *@DOMAIN.RU

I couldn't agree more. That's why I named this thread "idmap: inconsistent 
behavior" - a command like "idmap -c" makes two different mappings for
the same name at two differently cased (but otherwise the same) domain 
names. This is what's the problem: idmap is not case-insensitive (at some 
one step of the way).

Here's a more simple example to reproduce idmap problems: simply use different
casing of the domain name every time, and ephemeral ID is re-evaluated and 
changed (this is a buggy case-sensitive part of idmap), but the previously 
created mappings are overwritten (correctly case-insensitive).

# idmap show -cv jim at Domain.RU
winuser:jim at Domain.RU -> uid:2147647493
Source: New
Method: Ephemeral

# idmap show -cv jim at doMAIN.Ru
winuser:jim at doMAIN.Ru -> uid:2147647494
Source: New
Method: Ephemeral

# idmap show -cv jim at dOmAiN.ru
winuser:jim at dOmAiN.ru -> uid:2147647495
Source: New
Method: Ephemeral

# idmap dump -nv jim at dOmAiN.ru
winuser:jim at dOmAiN.ru      ==      uid:2147647495
Method: Ephemeral

Note: If I specify an explicitly invalid domain, it denies mapping:

# idmap show -cv jim at qweQWE 
winname:jim at qweQWE -> uid:60001
Error:  Domain not found

//Jim
-- 
This message posted from opensolaris.org