Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Jun 2015 11:25:17 -0700
From:      Chris Stankevitz <chrisstankevitz@gmail.com>
To:        freebsd-questions <freebsd-questions@freebsd.org>
Subject:   Re: chown silently fails to respect NSS
Message-ID:  <CAPi0pst--D8Xn8p1oJkF2k_He0JjJk24YbdcRbYVVB_fg6p33A@mail.gmail.com>
In-Reply-To: <CAPi0psuHon-nQHZnny32_m8F5FQKoVN4gVh%2BVmn1pnwRuUN0ZA@mail.gmail.com>
References:  <CAPi0psuHon-nQHZnny32_m8F5FQKoVN4gVh%2BVmn1pnwRuUN0ZA@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jun 23, 2015 at 11:43 AM, Chris Stankevitz
<chrisstankevitz@gmail.com> wrote:
> Why is chown is silently failing to chown a file to a winbind user
> that is listed in 'getent passwd'?

> root@zinc:~/temp # getent passwd MYDOMAIN\\cstankevitz
> MYDOMAIN\cstankevitz:*:4294967295:4294967295:Chris
> Stankevitz:/home/MYDOMAIN/cstankevitz:/bin/false
>
> root@zinc:~/temp # chown -v -v MYDOMAIN\\cstankevitz file.txt
>
> root@zinc:~/temp # ls -l
> total 1
> -rw-r--r--  1 root  wheel  0 Jun 23 11:34 file.txt

- chown silently fails when you pass the ridiculous UID 4294967295 (2^32-1)

- winbind was populating UID 4294967295 because I failed to supply an
idmap backend/range for the default domain.  This is apparently needed
to capture a special pseudo-domain called BUILTIN.

Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPi0pst--D8Xn8p1oJkF2k_He0JjJk24YbdcRbYVVB_fg6p33A>