iwidmap puzzle

Hey all,

I wanted to see if anyone else has run into this issue. I have open a case and will provide feedback as well.

Requirement:
Migrate a OS based group to a TeamSite based group.

Specific Condition:
TS 7.2.1 windows 2008 R2
The OS group is actually showing up in both the user token and the group token. This is a known issue with windows and namespaces.

Issue:
Converting the group token the exists in the group token files works fine. But when converting the one in the user file it dies saying it is an invalid username. If I try to convert to another OS group it works fine.

Things tried:
- used IWUID and gave the tsgroup id - FAIL
- updated inline DTD for user token to allow IWGID and then provided the tsgroups id - FAIL
- the token ID's are specific to user and group, meaning I cannot just move the user token record to the group file - FAIL

Any Thoughts would be great ! Thanks!

Find more posts tagged with

Comments

Adam Stoller

Which command line options for iwidmap have you tried using?

I.e.:

Also, have you tried mapping the OS-group to another OS-group first, and then mapping it to a TS-group? (no idea if this will work, but while you're trying different things ....)

John742

Thanks for the reply.

I have tried:
exporting and reimporting with the -u and -g commands with -i and -x, the remaps for -g for groups are ok.

I have also tried a direct -c group to group call, which gives the same error of not a valid user.

As u mention, I did tried to map the OS group that is in the users token to another OS group , this works fine. but then retrying the map to a TS group is still fails looking for a valid user with that name.

I feel like some logic was added to the iwidmap clt at some point to do this user id look-up for validation. without thinking about the windows namespace condition.

I also tried to update the inline dtd in the output of -u -x to allow iwguid option , but doing so it still fails saying invalid user. I have a eng. call this afternoon about it . Will let you know if any new info comes to light.

Thanks again.