PacketFence - BTS - PacketFence
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0001205PacketFenceconfigurationpublic2011-04-06 11:332011-05-04 11:40
Reporterfgaudreault 
Assigned Tofgaudreault 
PrioritynormalSeverityminorReproducibilitysometimes
StatusclosedResolutionfixed 
PlatformOSOS Version
Product Version 
Target VersionFixed in Version2.2.0 
fixed in git revision
fixed in mtn revision964afbddcc5d76216da87efb226b2b70831e2a66
Summary0001205: Winbind unable to map foreign SIDs
DescriptionOn some setup using SMB and winbind for NTLM authentication, we see this error message :

idmap will be unable to map foreign SIDs: NT_STATUS_UNSUCCESSFUL

This will make PEAP to fail on WPA2 setups. The cause of this error is because the ID mapping range is likely to be full.

We found a quick fix to this, but we will need to update our documentation to reflect that change.
Steps To Reproduce
Additional InformationIn order to fix the issue, you can add the following into the smb.conf file :
       idmap uid = 10000-15000
       idmap gid = 10000-15000

It seems to fix the issue.
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2011-04-06 11:33fgaudreaultNew Issue
2011-04-11 13:59fgaudreaultmtn revision => 964afbddcc5d76216da87efb226b2b70831e2a66
2011-04-11 13:59fgaudreaultNote Added: 0002021
2011-04-11 13:59fgaudreaultStatusnew => resolved
2011-04-11 13:59fgaudreaultFixed in Version => +1
2011-04-11 13:59fgaudreaultResolutionopen => fixed
2011-04-11 13:59fgaudreaultAssigned To => fgaudreault
2011-05-04 11:32obilodeauFixed in Version+1 => 2.2.0
2011-05-04 11:40obilodeauStatusresolved => closed

Notes
(0002021)
fgaudreault   
2011-04-11 13:59   
Updated the samba configuration example in the administration guide.