Group Authentication using winbind is broken

Stephen Collier stephenc at panavision.com.au
Wed Feb 28 08:47:44 GMT 2001


I am using winbind from CVS APPLIANCE_TNG and 2.2Alpha2 (the CVS SAMBA_2.2
is broken at the moment) on Redhat 6.2. 
I have it all working and am testing groups when I get a failure. The user
name is being lower cased and the group comparison is thus failing see
below. The directory that is being authorised has a group
PANAVISION+AccountAdmin only access permission. PANAVISION+stephenc is being
checked against panavision+stephenc and failing. Anyone have any solutions
as I will have a look at user_in_list tomorrow if there are no obvious
solutions posted.


[2001/02/28 19:33:32, 10] lib/username.c:user_in_list(393)
  user_in_list: checking user panavision+stephenc in list
@PANAVISION+AccountAdm
in
[2001/02/28 19:33:32, 5] lib/username.c:user_in_netgroup_list(248)
  looking for user panavision+stephenc of domain  in netgroup
PANAVISION+Account
Admin
[2001/02/28 19:33:32, 5] lib/username.c:user_in_netgroup_list(251)
  innetgr is FALSE
[2001/02/28 19:33:32, 7] lib/util_sid.c:string_to_sid(352)
  string_to_sid: converted SID S-1-5-21-XXXXXXX-XXXXXX-XXXXXXX-XXXXX ok
[2001/02/28 19:33:32, 10] lib/username.c:user_in_list(393)
  user_in_list: checking user panavision+stephenc in list
[2001/02/28 19:33:32, 10] lib/username.c:user_in_list(393)
  user_in_list: checking user  in list
[2001/02/28 19:33:32, 10] lib/username.c:user_in_list(393)
  user_in_list: checking user  in list @PANAVISION+AccountAdmin
[2001/02/28 19:33:32, 5] lib/username.c:user_in_netgroup_list(248)
  looking for user  of domain  in netgroup PANAVISION+AccountAdmin
[2001/02/28 19:33:32, 5] lib/username.c:user_in_netgroup_list(251)
  innetgr is FALSE
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(336)
  user_in_unix_group_list: checking user  in group PANAVISION+AccountAdmin
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred1

[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred2
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred3
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred4
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred5
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+fred6
[2001/02/28 19:33:32, 10] lib/username.c:user_in_unix_group_list(358)
  user_in_unix_group_list: checking user  against member PANAVISION+stephenc
[2001/02/28 19:33:32, 2] smbd/service.c:make_connection(325)
  Invalid username/password for closed acct []
[2001/02/28 19:33:32, 3] smbd/error.c:error_packet(140)




More information about the samba-technical mailing list