[Samba] user map Problem with security= ADS after upgrade form 3.5.13 to 3.6.4

[HUYNH-SC, Minh]

Hi, thanks,

Are you use KerBEros with Winbind?

or you use like me ? KERBEROS + EXTRA LDAP on UNIX + DC 2008R2 + USERMAPS

Minh
________________________________
De : "Maurer, Hansjörg" [mailto:Hansjoerg.Maurer at dlr.de]
Envoyé : mardi 22 mai 2012 15:52
À : HUYNH-SC, Minh; samba-technical at lists.samba.org
Objet : Re: [Samba] user map Problem with security= ADS after upgrade form 3.5.13 to 3.6.4

Hi

On 22.05.2012 15:45, HUYNH-SC, Minh wrote:
Hello,

Have you find something?
I opened

https://bugzilla.samba.org/show_bug.cgi?id=8881

Thomas Beinicke<mailto:merlin at liao.homelinux.org> commented that the username map works, if he connects to the server
with  \\IP-Number instead of \\HOSTNAME

I can confirm this.
If I connect to the Server using \\IP-Number instead of \\HOSTNAME the usermapping itself works and users not available to the Unix Systems are mapped too


Regards

Hansjörg


Regards

Minh

________________________________
De : "Maurer, Hansjörg" [mailto:Hansjoerg.Maurer at dlr.de]
Envoyé : jeudi 3 mai 2012 08:52
À : HUYNH-SC, Minh
Objet : Re: [Samba] user map Problem with security= ADS after upgrade form 3.5.13 to 3.6.4

Hi

thank you very much

Could you please mail your problem to the samba technical list to ?
Maybe as reply to my mail from 18 April

"username map not working after upgrade form 3.5.13 to 3.6.4 (security=ADS)"

That might rais the focus of the developers a bit more

Regards

Hansjörg Maurer


On 27.04.2012 16:03, HUYNH-SC, Minh wrote:
Hi !

I'm come France, it is not important :-)
I'm facing the same problem of you about Samba Security = ADS on 3.6.3
My unix user is correctly mapped to "window account" but i've got same error message

Have you resolved your problem?

[2012/04/27 13:39:10.550408,  3] auth/user_krb5.c:50(get_user_from_kerberos_info)
  Kerberos ticket principal name is [Minh.HUYNH at EXAMPLE.COM]
[2012/04/27 13:39:10.550519,  3] auth/user_util.c:402(map_username)
  Mapped user ALFRGIS\Minh.HUYNH to huynhm
[2012/04/27 13:39:10.571135,  3] auth/auth_util.c:1028(check_account)
  Failed to find authenticated user ALFRGIS\minh.huynh via getpwnam(), denying access.
[2012/04/27 13:39:10.571221,  1] auth/user_krb5.c:211(make_server_info_krb5)
  make_server_info_info3 failed: NT_STATUS_NO_SUCH_USER!
[2012/04/27 13:39:10.571284,  1] smbd/sesssetup.c:379(reply_spnego_kerberos)
  make_server_info_krb5 failed!
[2012/04/27 13:39:10.571359,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(383) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2012/04/27 13:39:12.804376,  3] smbd/server_exit.c:180(exit_server_common)
  Server exit (failed to receive smb request)
~

Cordialement/Regards
Minh HUYNH



--

--------------------------

Deutsches Zentrum für Luft- und Raumfahrt e.V. (DLR)

Robotik und Mechatronik Zentrum | Münchner Strasse 20 | 82234 Wessling

Dr. Hansjörg Maurer | Telefon 08153 28-2431 | Telefax 08153 28-1134 | Hansjoerg.Maurer at dlr.de<mailto:Hansjoerg.Maurer at dlr.de>

www.DLR.de<http://www.DLR.de>



--

--------------------------

Deutsches Zentrum für Luft- und Raumfahrt e.V. (DLR)

Robotik und Mechatronik Zentrum | Münchner Strasse 20 | 82234 Wessling

Dr. Hansjörg Maurer | Telefon 08153 28-2431 | Telefax 08153 28-1134 | Hansjoerg.Maurer at dlr.de<mailto:Hansjoerg.Maurer at dlr.de>

www.DLR.de<http://www.DLR.de>