samba - Apr 2007 - winbind nss info : how does it handle multiple values?

It looks to me like the 'winbind nss info' parameter is designed to be a
space-separated list of values.  I say this because:

1) i gave it two values, separated by spaces, and testparm(1) did not
complain;

2) the man page
( http://www.die.net/doc/linux/man/man5/smb.conf.5.html ) gives an
example of two values.

Assuming that's true, how do the multiple values work together?  Is
order significant?  I assume it is, and that it works like the
nsswitch.conf semantics:

	try each source, from left to right, stopping
	with the first source that yields a match.

Is that correct?  If not, how does it work?

I set it like so:

	winbind nss info = template sfu

with the following attribute also set:

	template homedir = /home/%U

but a 'getent passwd joeblow' returns the homedir recorded in Microsoft
A.D. via mssfu (which isn't in /home), even tho 'sfu' follows
'template'
in the list.

This looks like a bug.  I'm running v3.0.22.  According to v3.0.23
release notes, there was no bug like this fixed in v3.0.23, so it may
broken there too.

Please enlighten me if I'm wrong.

Thanks,

Jon

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jonathan C. Detert wrote:
> I set it like so:
> 
> 	winbind nss info = template sfu
More like winbind nss info = template AD_DOMAIN:sfu.  But
I'm not sure how well this was tested prior to 3.0.25

> with the following attribute also set:
> 
> 	template homedir = /home/%U
> 
> but a 'getent passwd joeblow' returns the homedir recorded 
> in Microsoft A.D. via mssfu (which isn't in /home), even
> tho 'sfu' follows 'template' in the list.
> 
> This looks like a bug.  I'm running v3.0.22.  According 
> to v3.0.23 release notes, there was no bug like this fixed
> in v3.0.23, so it may broken there too.
Also please read the 3.0.25rc3 release notes regarding changes
to the nss_info interface.





cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGMfEpIR7qMdg1EfYRAkk/AJ9RWk7NmMqSUtIuFWErUxVJ42JVTgCgnn6T
g9Myvv8fVuxuY5NcThiIvMs=hhfA
-----END PGP SIGNATURE-----