Hold off on 3.2.2 release please.

[Jeremy Allison]

On Fri, Aug 15, 2008 at 12:44:22PM +1000, Andrew Bartlett wrote:
> On Thu, 2008-08-14 at 19:24 -0700, Jeremy Allison wrote:
> > On Thu, Aug 14, 2008 at 06:27:15PM -0700, Jeremy Allison wrote:
> > > On Thu, Aug 14, 2008 at 05:03:39PM -0700, Jeremy Allison wrote:
> > > > I'm tracking a potential show-stopper with Herb w.r.t. group
> > > > membership order in smbd when using winbindd to auth.
> > > > 
> > > > I'll post more when I have more info. Herb is also looking
> > > > into this tonight.
> > > 
> > > Ok, here's the patch that works for Herb so I don't lose it. I'm
> > > going to check this in later tonight with a full explaination.
> > 
> > Actually, I think this is a better patch - covers all
> > possible instances of this problem.
> > 
> > The problem is that when smbd authenticates to winbindd
> > via ntlm, the returned sid group list is sorted in the
> > reverse order to what smbd expects. Ie. the sid at position
> > 0 in the array is not the primary group sid. This messes
> > up the primary group associated with created files.
> 
> Is it in the right order in the returned info3 (from the remote DC)?

According to Herb it's varying depending on the call
made to the DC (or if it's from the PAC). I'd need
to see packet traces to be sure. But it's a definate
show-stopper until fixed.

Jeremy.