known BUG "multi-byte character set in usernames"

[Guenther Deschner]

hello,

smb.conf-manpage of 2.2.5pre and HEAD states the bug of "multi-byte character
sets in usernames":

-----8<------------------snip--------------8<--------------
BUG: There is currently a bug  in  the  implementation  of
       security = domain with respect to multi-byte character set
       usernames. The communication with a Domain Controller must
       be  done  in  UNICODE  and  Samba currently does not widen
       multi-byte user names to UNICODE correctly, thus a  multi-
       byte  username  will  not  be  recognized correctly at the
       Domain Controller. This  issue  will  be  addressed  in  a
       future release.
----->8------------------snap-------------->8--------------

will this bug be solved in the near future? in 2.2.5 or HEAD?

the main problem with this is that you get crippled wellknown
domain-groups with winbind (on suse linux 8, kernel 2.4.18, samba-2_2) 
and german NT-servers where rid200 (Domain Admins) is Domänen-Admins, 
and rid202 is Domänen-Gäste.

now wbinfo -g cuts out the UTF8 chars and will show you e.g.
DOMAIN+Domnen-Admins, DOMAIN+Domnen-Gste, etc.

now you cannot set XFS-ACLs properly since neither DOMAIN+Domnen-Admins
nor DOMAIN+Domänen-Admins does resolve back ...

a simple (and ugly) workaround is to create the three domain-groups in
question in /etc/group. with that you still have to keep an eye on the
correct winbind-gid mapping and rid200 appears crippled in security tab.

is there any other workaround for this?


thanks,
guenther 

-- 
Guenther Deschner                          guenther.deschner at suse.de
SuSE Linux AG                                        GnuPG: 8EE11688
Berliner Str. 27                      phone:  +49 (0) 30 / 430944778
D-13507 Berlin                           fax:  +49 (0) 30 / 43732804
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020530/d089ebac/attachment.bin