[Samba] LDAP Supplementary Groups not recognised

[Malcolm Gibbs]

It would appear my problem is caused by Solaris 9
libsldap patch 112960-06.

When reverting from 112960-06 to 112960-03 that is
bundled with Solaris 9 12/02 my problem disappeared.

So if you are implementing SAMBA/LDAP on Solaris 9
12/02 avoid this patch, otherwise supplementary LDAP
groups will not work in SAMBA.

As I work for Sun you could say 'sweet justice'. I
will be following this up internally.

Thanks to all that responded.

Malcolm

----- Original Message -----
From: "Gerald (Jerry) Carter" <jerry at samba.org>
Date: Sunday, April 6, 2003 2:09 am
Subject: Re: [Samba] LDAP Supplementary Groups not
recognised

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Sat, 5 Apr 2003, Malcolm Gibbs wrote:
> 
> > Yes what is fustrating is that supplementary
LDAP groups are working
> > fine from the Solaris shell, it is only SAMBA
that appears to be
> > ignoring them.
> > 
> > Do posixGroup entries have to have any
additional attributes or 
> be in a 
> > particular base to be recognised by SAMBA,
Solaris 9 by default 
> puts 
> > them in ou=group,dc=xx,dc=com.
> 
> I don't think this is related to LDAP.  Can you
test using a 
> standard 
> /etc/passwd file and see if you get the same
behavior.   I've got 
> unconfirmed reports of a possible generic bug in
this area.
> 
> 
> 
> 
> cheers, jerry
>
-------------------------------------------------------------------
> ---
> Hewlett-Packard            ------------------------- 
> http://www.hp.com SAMBA Team                
---------------------- 
> http://www.samba.org GnuPG Key                  ---- 
> http://www.plainjoe.org/gpg_public.asc "You can
never go home 
> again, Oatman, but I guess you can shop there."  
>                            --John Cusack - "Grosse
Point Blank" 
> (1997)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.0 (GNU/Linux)
> Comment: For info see
http://quantumlab.net/pine_privacy_guard/
> 
>
iD8DBQE+juOvIR7qMdg1EfYRAi3MAKCozIM5aQMrWx0L6wfFJZDe0/PXvQCgzwiH
> /FeyoIcmzqGj78WgdQ8rybY=
> =yMVB
> -----END PGP SIGNATURE-----
> 
>