[Samba] LDAP Supplementary Groups not recognised
Malcolm Gibbs
Malcolm.Gibbs at Sun.COM
Tue Apr 8 02:24:42 GMT 2003
It would appear my problem is caused by Solaris 9
libsldap patch 112960-06.
When reverting from 112960-06 to 112960-03 that is
bundled with Solaris 9 12/02 my problem disappeared.
So if you are implementing SAMBA/LDAP on Solaris 9
12/02 avoid this patch, otherwise supplementary LDAP
groups will not work in SAMBA.
As I work for Sun you could say 'sweet justice'. I
will be following this up internally.
Thanks to all that responded.
Malcolm
----- Original Message -----
From: "Gerald (Jerry) Carter" <jerry at samba.org>
Date: Sunday, April 6, 2003 2:09 am
Subject: Re: [Samba] LDAP Supplementary Groups not
recognised
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sat, 5 Apr 2003, Malcolm Gibbs wrote:
>
> > Yes what is fustrating is that supplementary
LDAP groups are working
> > fine from the Solaris shell, it is only SAMBA
that appears to be
> > ignoring them.
> >
> > Do posixGroup entries have to have any
additional attributes or
> be in a
> > particular base to be recognised by SAMBA,
Solaris 9 by default
> puts
> > them in ou=group,dc=xx,dc=com.
>
> I don't think this is related to LDAP. Can you
test using a
> standard
> /etc/passwd file and see if you get the same
behavior. I've got
> unconfirmed reports of a possible generic bug in
this area.
>
>
>
>
> cheers, jerry
>
-------------------------------------------------------------------
> ---
> Hewlett-Packard -------------------------
> http://www.hp.com SAMBA Team
----------------------
> http://www.samba.org GnuPG Key ----
> http://www.plainjoe.org/gpg_public.asc "You can
never go home
> again, Oatman, but I guess you can shop there."
> --John Cusack - "Grosse
Point Blank"
> (1997)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see
http://quantumlab.net/pine_privacy_guard/
>
>
iD8DBQE+juOvIR7qMdg1EfYRAi3MAKCozIM5aQMrWx0L6wfFJZDe0/PXvQCgzwiH
> /FeyoIcmzqGj78WgdQ8rybY=
> =yMVB
> -----END PGP SIGNATURE-----
>
>
More information about the samba
mailing list