[SUCCESS] RE: Samba, winbind, solaris and your patch

Tue May 14 08:33:02 GMT 2002

Hello Mike,

in the end it works.

I applied your patch to winbind, although it seemed to be applied while I
compiled your idmap_files.so.
compiled and installed nss_winbind.so
restarted nscd
restarted winbind

and NOW I can connect to that machine from explorer, set my acl's using the
uid provided from winbind etc...

As you asked for, find attached the compiled idmap_files.so stuff which does
not work on my machine.

Best Regards

Thanks again

Roman

 <<idmap_file.tar.gz>> 

> -----Ursprüngliche Nachricht-----
> Von:	Mike  Gerdts [SMTP:Michael.Gerdts at alcatel.com]
> Gesendet am:	Montag, 13. Mai 2002 20:00
> An:	Klein.Roman at Yamanouchi.de
> Betreff:	Re: Samba, winbind, solaris and your patch
> 
> On Mon, 2002-05-13 at 11:20, Klein.Roman at Yamanouchi.de wrote:
> > Hello Mike,
> > 
> > I was veerrryyy interested in your work when I first saw your posting
> > concerning winbind and the related problems when running it on more than
> one
> > machine.
> 
> Glad to hear it.  I was begininning to think that I was the only one
> looking for this functionality.
>  
> > I therefore immediately downloaded your patch and enhancements to
> winbind
> > and applied it to samba 2.2.4.
> > 
> > But when starting winbindd I get error messages in the log.winbindd
> stating
> > that the loader ld.so.1 can not find the symbol main in idmap_file.so.
> 
> Hmmmm... not sure about that.  Could you send me the version that you
> compiled so that I can compare it against the one that works for me? 
> Also, please include any modifications that you did to the makefile to
> get it to compile.
> 
> > Any idea what could be wrong?
> 
> Perhaps a different compiler and/or linker contributed to the problems. 
> I am using gcc 2.95.2 on Solaris 8.
> 
> > My configuration is as follows:
> > 
> > Solaris 2.6
> > Samba 2.2.4
> > gcc et al 2.95.3
> > 
> > 
> > Besides the problem that winbindd, without your patch, causes trouble in
> an
> > multi-machine environment I face the following problem, with and without
> > your patch, as well:
> > 
> > - winbindd is running
> > - wbinfo -u --> shows all domain users
> > - wbinfo -g --> shows all domain groups
> > - getent passwd --> shows all, local and domain, users
> > - getent group --> shows all, local and domain, groups
> > - getent passwd domain+domuser --> shows passwd entry for specified
> domain
> > user
> > - wbinfo -a domain+domuser%passwd --> both authentication methods
> succeed
> > - when install pam_winbind --> login to solaris as domain+domuser and
> > domain-passwd works
> > 
> > BUT
> > 
> > connecting from an windows-box in explorer to a share on that
> > winbind-machine is not working.
> > I tried to track it down and I think I found out that when winbind tries
> to
> > call the solaris function 'getpwnam' that function returns a
> null-pointer.
> 
> This is likely the bug related to the passwd structure on Solaris having
> pw_age and pw_comment fields.  See
> http://lists.samba.org/pipermail/samba-technical/2002-May/036614.html
> for details.  If you didn't remove that part from my patch, you should
> be protected from this bug.  You may want to take a look at
> source/lib/system.c.  In wsys_getpwnam() there is another function that
> copies the passwd structure (wsys_getpwnam).  It looks as though it is
> not called by anything, but perhaps I am missing some funky macro or
> define that comes out of configure somewhere.
> 
> If there is another problem, I am not sure where exactly it would be
> at.  The bug I found was quite difficult to find until I recompiled nscd
> with debugging symbols.  Unfortunately, that is not an option for most
> people, especially with Solaris 2.6.  AFAIK, Sun only gave the Solaris
> 2.5.1, 2.6, and 7 code to univerisities.  The only Sun source that I
> have access to for debugging things like this is Solaris 8.
> 
> > I assume from your postings that you are familiar with c, solaris and
> have a
> > running winbind environment.
> 
> I have tried minimal functionality of winbindd.  I do not want to use
> the winbind PAM module because UNIX users should authenticate against
> NIS.  getent passwd <domain\\user> and getent passwd <uid> work just
> fine.  Exporer on NT4 and Win2k is able to create files and display ACLs
> consistent with what I expect, given the U/GIDs assigned by winbindd. 
> ls and getfacl concur with the results that Windows explorer show. 
> Also, I explorer on Windows 98 is able to create directories just fine
> (that is all I tried from 98).
> 
> > Any idea what causes that problem, when I posted this problem to the
> > samba-technical mailing list no one was responding except some other
> usesrs
> > facing the same problem.
> > 
> > Can you contribute in any matter to this problems?
> > 
> > Would be veeerrryyyy helpful.
> > 
> > Thanks in advance and best regards
> > 
> > Roman
> 
> If you don't have a reason for not Cc'ing the list, please do so in the
> future so that others can benefit from your question and my response. 
> It helps the samba team know that there is more than one person that
> would like this functionality and they are more likely to include it in
> future releases.
> 
> Please let me know if this does or does not help.
> Mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: idmap_file.tar.gz
Type: application/octet-stream
Size: 6413 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020514/1276649a/idmap_file.tar.obj