[PATCH] s3:winbind: gid 0 in getgrgid must be resolved locally

Ralph Wuerthner ralphw at de.ibm.com
Wed Sep 27 14:32:41 UTC 2017


Hi!

On 25.09.2017 21:30, Christof Schmitt wrote:
> On Mon, Sep 25, 2017 at 05:14:32PM +0200, Volker Lendecke via samba-technical wrote:
>> On Wed, Sep 13, 2017 at 12:19:28PM +0200, Ralph Wuerthner via samba-technical wrote:
>>> please see attached patch to address the following winbind error message:
>>>
>>> Jul 26 14:37:43 sambatest winbindd[24983]: [2017/07/26 14:37:43.057886, 0,
>>> pid=24983, effective(0, 0), real(0, 0), class=winbind]
>>> ../source3/winbindd/winbindd_group.c:45(fill_grent)
>>> Jul 26 14:37:43 sambatest winbindd[24983]: Failed to find domain 'Unix
>>> Group'. Check connection to trusted domains!
>>
>> What about filtering S-1-2-22 in wb_getgrsid_send already?
> 
> Something like dom_sid_in_domain(global_sid_Unix_Group, group_sid)?
> 
> b_getpwsid_send should also get a similar check for local users:
> dom_sid_in_domain(global_sid_Unix_Users, user_sid)
> 
> Christof

Please see attached patchset were I moved the check to wb_getgrsid_send 
and wb_getpwsid respectively.

-- 
Regards

    Ralph Wuerthner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: unmapped-unix-users-and-groups.patch
Type: text/x-patch
Size: 2071 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20170927/db12d2a6/unmapped-unix-users-and-groups.bin>


More information about the samba-technical mailing list