Samba package 4.9.x samba smbd not playing with winbind.

[Alexander Bokovoy]

On to, 20 joulu 2018, Stefan Metzmacher via samba-technical wrote:
> Hi Alexander,
> 
> > [2018/12/02 17:35:57.596884,  3] ../source3/groupdb/mapping.c:834(pdb_create_builtin_alias)
> >   pdb_create_builtin_alias: Could not get a gid out of winbind
> > [2018/12/02 17:35:57.596924,  5] ../source3/passdb/pdb_util.c:201(create_builtin_guests)
> >   create_builtin_guests: Failed to create Guests
> > [2018/12/02 17:35:57.596968,  4] ../source3/smbd/sec_ctx.c:438(pop_sec_ctx)
> >   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2018/12/02 17:35:57.596988,  2] ../source3/auth/token_util.c:774(finalize_local_nt_token)
> >   Failed to create BUILTIN\Guests group NT_STATUS_ACCESS_DENIED!  Can Winbind allocate gids?
> > [2018/12/02 17:35:57.597026,  3] ../source3/auth/token_util.c:412(create_local_nt_token_from_info3)
> >   Failed to finalize nt token
> > [2018/12/02 17:35:57.597045,  0] ../source3/auth/auth_util.c:1382(make_new_session_info_guest)
> >   create_local_token failed: NT_STATUS_ACCESS_DENIED
> > [2018/12/02 17:35:57.597304,  0] ../source3/smbd/server.c:2000(main)
> >   ERROR: failed to setup guest info.
> > 
> > We discussed this in the beginning of the thread already. Samba 4.9
> > requires existence of BUILTIN\Guests mapping. If passdb backend is
> > responsible for builtins, we'll attempt to create BUILTIN\Guests there.
> > However, if there is no range set up, we cannot allocate the rid using
> > this idmap domain.
> > 
> > A solution was also posted in this thread:
> > 
> > net groupmap add sid=S-1-5-32-546 unixgroup=nobody type=builtin
> 
> I think the first patch of this merge request should also fix it:
> 
> https://gitlab.com/samba-team/samba/merge_requests/176
> 
> Please review and push:-)
Thanks, Metze. I actually was looking at the same area last week but
felt to ground in my battle against a seasonal flu. The change looks OK
to me.

RB+, pushed to autobuild.



-- 
/ Alexander Bokovoy