PGP SIGNED MESSAGE
Hash: SHA1
Hello List,
Yesterday evening I upgraded my FreeBSD 5.5-RELEASE Server from Samba
3.0.22 to 3.0.23. This gave me a LT of work today :-(
This is what I found so far:
My Samba-Server is member of a large ADS-Domain. After the upgrade,
file based Usermapping didn't work anymore better: it worked
TWICE. (I once opened a PR for that a few years ago :-). So, with
LogLevel 3:
<DMAIN>\<WinUseris mapped to <UnixUser>
<DMAIN>\<UnixUseris mapped to <DefaultUser>
(I have a line "<DefaultUser= *" in my 'smbusers.map'-file)
These two lines are immediately following each other, no other log
lines in between
I said this happens on 3.0.23, I verified the same behaviour on
3.0.23b as well.
The very strange thing (at least for me :-) is, that somehow it seems
to be dependend from the name resolution (I have 'wins host bcast' in
my smb.conf):
If I address the Sambaserver with its WINSname (\\SambaServer),
usermapping happens TWICE.
If I use its IP-Address, usermapping happens NCE (i.e. correctly).
If I use the DNS-Name of the AD-Domain (\
\sambaserver.ad.company.com), usermapping happens TWICE.
If I use another DNS-Domain (\\),
usermapping happens NCE (i.e. correctly).
I found this more or less by accident, fortunately I'm DNS-Admin of
'location.company.de' :-) so I could try a different DNS-Name
Somehow it seems to me, that the DomainController submits some
strange informations which irritates my SambaServer
Needless to say that this didn't occur with samba-3.0.22. It doesn't
occur on another large ADS-Domain either (where I had my Test-
Machine), but this is of no use for me, I cannot switch the Domain
the server is in :-(
Any Ideas anybody? Some other test to narrow he error down? I'm
willing to cooperate as much as possible, the Samba-Server has >100
productive users
Thanks in advance - Matthew
- --
Ciao/BSD - Matthias
Matthias Schuendehuette <msch [at] snafu.de>, Berlin (Germany)
PGP-Key at <pgp.mit.eduand <wwwkeys.de.pgp.netID: 0xDDFB0A5F
PGP SIGNATURE
Version: GnuPG v1.4.1 (Darwin)
mAyXW04EuITUvGr9JVU=
=9f0z
PGP SIGNATURE

PGP SIGNED MESSAGE
Hash: SHA1

Matthias Schuendehuette wrote:

My Samba-Server is member of a large ADS-Domain.
After the upgrade, file based Usermapping didn't
work anymore better: it worked TWICE. (I
once opened a PR for that a few years ago :-).
So, with LogLevel 3:

<DMAIN>\<WinUseris mapped to <UnixUser>
<DMAIN>\<UnixUseris mapped to <DefaultUser>

(I have a line "<DefaultUser= *" in my 'smbusers.map'-file)

I just fixed this for 3.0.23c.

If I use its IP-Address, usermapping happens NCE
(i.e. correctly).

It's dependent on whether the session setup used Krb5
or NTLM.

Any Ideas anybody? Some other test to narrow he error
down? I'm willing to cooperate as much as possible, the
Samba-Server has >100 productive users

I've attached the patch that is included for 3.0.23c.

cheer,s jerry

Samba http://www.samba.org
Centeris http://www.centeris.com
"What man is a man who does not make the world better?"
PGP SIGNATURE
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

uThSW6mb+DJ6eE0iapYf3iE=
=hQJ8
PGP SIGNATURE

Index: smbd/sesssetup.c

smbd/sesssetup.c(revision 17908)
smbd/sesssetup.c(working copy)
@@ -320,10 +320,14 @@

sub_set_smb_name( real_username );
reload_services(True);
+
if ( map_domainuser_to_guest ) {
make_server_info_guest(&server_info);
} else if (logon_info) {
-ret = make_server_info_info3(mem_ctx, real_username, domain,
+/* pass the unmapped username here since map_username()
+ will be called again from inside make_server_info_info3() */
+
+ret = make_server_info_info3(mem_ctx, user, domain,
&server_info, &logon_info->info3);
if ( !NT_STATUS_ISK(ret) ) {
DEBUG(1,("make_server_info_info3 failed: %s!\n",

Tuesday 29 August 2006 12:21, Gerald (Jerry) Carter wrote:
I've attached the patch that is included for 3.0.23c.
Are you planning to update your to
include this?

PGP SIGNED MESSAGE
Hash: SHA1

Chris wrote:
Tuesday 29 August 2006 12:21, Gerald (Jerry) Carter wrote:
>I've attached the patch that is included for 3.0.23c.

Are you planning to update your
to include this?

I just sent out a notice about Rev #2. If all goes well, we'll
see 3.0.23c in a few days.

ciao, jerry

Samba http://www.samba.org
Centeris http://www.centeris.com
"What man is a man who does not make the world better?"
PGP SIGNATURE
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

slWDVP2sCv9IU38=
=h9aq
PGP SIGNATURE