Project

General

Profile

Feature #26814

Check that default and domain IDMAP ranges don't overlap

Added by Timur Bakeyev almost 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
No priority
Assignee:
Lola Yang
Category:
GUI (new)
Estimated time:
Severity:
New
Reason for Closing:
Reason for Blocked:
Needs QA:
Yes
Needs Doc:
Yes
Needs Merging:
Yes
Needs Automation:
No
Support Suite Ticket:
n/a
Hardware Configuration:

Description

In the directory service configuration screen we need to verify that IDMAP range for the configured domain doesn't overlap with the default IDMAP range.


Related issues

Related to FreeNAS - Bug #26553: Changing IDMAP on SMB service causes an exception error Closed: Duplicate2017-11-08
Related to FreeNAS - Bug #27095: Enable to edit idmap on AD/LDAP screenResolved2017-12-07

History

#1 Updated by Timur Bakeyev almost 3 years ago

  • Related to Bug #26553: Changing IDMAP on SMB service causes an exception error added

#2 Updated by Timur Bakeyev almost 3 years ago

  • Copied to Feature #26815: Check that default and domain IDMAP ranges don't overlap added

#3 Updated by Timur Bakeyev almost 3 years ago

  • Copied to deleted (Feature #26815: Check that default and domain IDMAP ranges don't overlap)

#4 Updated by Dru Lavigne almost 3 years ago

  • Status changed from Untriaged to Unscreened
  • Assignee changed from Release Council to Lola Yang

#5 Updated by Lola Yang almost 3 years ago

  • Status changed from Unscreened to Closed: Duplicate
  • Assignee changed from Lola Yang to Timur Bakeyev

hi Timur, this ticket is duplicate to https://redmine.ixsystems.com/issues/26815. I am closing this one.

#6 Updated by Timur Bakeyev almost 3 years ago

  • Status changed from Closed: Duplicate to Unscreened

Hi, Lola!

Those are sibling tickets, for new and legacy GUIs. There are two different teams who deal with those GUIs, hence 2 tickets.

For new GUI it should be quite simple, actually, you can retrieve necessary information through REST API and just need to compare two ranges.

#7 Updated by Lola Yang almost 3 years ago

  • Status changed from Unscreened to Screened
  • Assignee changed from Timur Bakeyev to Lola Yang

Timur Bakeyev wrote:

Hi, Lola!

Those are sibling tickets, for new and legacy GUIs. There are two different teams who deal with those GUIs, hence 2 tickets.

For new GUI it should be quite simple, actually, you can retrieve necessary information through REST API and just need to compare two ranges.

oh okay. thanks.

#8 Updated by Lola Yang almost 3 years ago

  • Status changed from Screened to Unscreened
  • Assignee changed from Lola Yang to Timur Bakeyev

This should be a middleware issue.

1. when user click 'save' button to change the range, if it overlaps with the default range, middleware should return an error.
2. no API can be used to get default idmap range.

#9 Updated by Timur Bakeyev almost 3 years ago

  • Status changed from Unscreened to Screened

It's not middleware, it's REST API and, hence, Django. Handling this in Django way more difficult, that's why I thought it's easier to handle in UI.

As for middleware, you can retrieve data for default backend with a query like:

# midclt call datastore.query directoryservice.idmap_tdb '[["idmap_ds_type", "=", "5"], ["idmap_ds_id", "=", "1"]]'

Where "1" is the id you get in the /api/v1.0/services/cifs/ call:

{
  "cifs_SID": null,
  "cifs_srv_aio_enable": false,
  "cifs_srv_aio_rs": 4096,
  "cifs_srv_aio_ws": 4096,
  "cifs_srv_allow_execute_always": true,
  "cifs_srv_bindip": [],
  "cifs_srv_description": "FreeNAS Server",
  "cifs_srv_dirmask": "",
  "cifs_srv_domain_logons": false,
  "cifs_srv_doscharset": "CP1252",
  "cifs_srv_filemask": "",
  "cifs_srv_guest": "nobody",
  "cifs_srv_hostlookup": true,
  "cifs_srv_localmaster": true,
  "cifs_srv_loglevel": "1",
  "cifs_srv_netbiosalias": "",
  "cifs_srv_netbiosname": "fn110-sdk",
  "cifs_srv_netbiosname_b": null,
  "cifs_srv_ntlmv1_auth": false,
  "cifs_srv_nullpw": false,
  "cifs_srv_obey_pam_restrictions": true,
  "cifs_srv_smb_options": "",
  "cifs_srv_syslog": false,
  "cifs_srv_timeserver": true,
  "cifs_srv_unixcharset": "UTF-8",
  "cifs_srv_unixext": true,
  "cifs_srv_workgroup": "WORKGROUP",
  "cifs_srv_zeroconf": true,
  "id": 1
}

#10 Updated by Timur Bakeyev almost 3 years ago

  • Status changed from Screened to Unscreened
  • Assignee changed from Timur Bakeyev to Lola Yang

#11 Updated by Lola Yang almost 3 years ago

  • Related to Bug #27095: Enable to edit idmap on AD/LDAP screen added

#12 Updated by Lola Yang almost 3 years ago

  • Status changed from Unscreened to Needs Developer Review
  • Assignee changed from Lola Yang to Erin Clark
  • Target version set to Master - FreeNAS Nightlies

#13 Updated by Dru Lavigne almost 3 years ago

  • Status changed from Needs Developer Review to Resolved
  • Assignee changed from Erin Clark to Lola Yang

Also available in: Atom PDF