[Samba] Mac OS X client problem with supplementary groups

[Gordon Grant]

forgot to mention: SAMBA server is Solaris 9 using SUN DS 5.2 as LDAP 
backend for nsswitch.conf.  Never get any problems with w2k pro clients 
connecting to the server -- not even sure if this is a SAMBA issue at 
all.

On 13 Jan 2004, at 17:02, Gordon Grant wrote:

> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind
> support compiled into it.  I have noticed a strange problem with
> supplementary groups I noticed with Mac OS X (10.3.2).  The SAMBA
> server is using 'ntdomain' authentication.
>
> When someone connects to the SAMBA server and gives their username in
> uppercase (the OS's default), then none of the secondary UNIX groups
> the user is a member of is picked up.  If exactly the same connect is
> made, but with the username in lowercase, then the groups are picked
> up.
>
> I have verified this in debug logs (can post) -- this seems v. odd to
> me, surely I must be missing something here??
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
> X-MimeOLE: Produced By Microsoft Exchange V6.0.6375.0 Received: from 
> ruiz.eu.babcockbrown.com ([10.64.5.4]) by eumail.eu.babcockbrown.com 
> with Microsoft SMTPSVC(5.0.2195.5329); Tue, 13 Jan 2004 17:03:18 +0000 
> Received: from tiburon.us.babcockbrown.com 
> (tiburon.us.babcockbrown.com [10.16.5.14]) by ruiz.eu.babcockbrown.com 
> (8.12.9/8.12.7) with ESMTP id i0DGBNOZ012629 for ; Tue, 13 Jan 2004 
> 16:11:24 GMT MIME-Version: 1.0 Content-Type: text/html; 
> charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable 
> Received: from lombard.babcockbrown.com (localhost [127.0.0.1]) by 
> tiburon.us.babcockbrown.com (8.12.9/8.12.9) with ESMTP id 
> i0DH1ZA6023241 for ; Tue, 13 Jan 2004 09:01:35 -0800 (PST) Received: 
> from clientmail2.amicus.com (clientmail2.amicus.com [208.134.137.26]) 
> by lombard.babcockbrown.com (8.12.10/8.12.10) with ESMTP id 
> i0DGopVx026027 for ; Tue, 13 Jan 2004 08:50:51 -0800 (PST) Received: 
> from p01m171.mxlogic.net (p01m171.mxlogic.net [66.179.109.171]) by 
> clientmail2.amicus.com (8.12.6/8.12.6) with SMTP id i0DH37TZ007983 for 
> ; Tue, 13 Jan 2004 11:03:07 -0600 Received: from dp.samba.org 
> [66.70.73.150] (EHLO lists.samba.org) by p01m171.mxlogic.net 
> (mxl_mta-1.3.6-0) with ESMTP id 35424004.6382.013.p01m171.mxlogic.net; 
> Tue, 13 Jan 2004 10:01:07 -0700 (MST) Received: from dp.samba.org 
> (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id 
> 0858F2C478 for ; Tue, 13 Jan 2004 17:03:02 +0000 (GMT) 
> Return-Path:X-Mailer: Apple Mail (2.609) X-OriginalArrivalTime: 13 Jan 
> 2004 17:03:18.0082 (UTC) FILETIME=[2402D220:01C3D9F7] X-MX-Spam: 
> final=0.0100000000; heur=0.5000000000(0); stat=0.0100000000; 
> spamtraq=0.5000000000(no match) X-MX-MAIL-FROM:Errors-To: 
> samba-bounces+gordon.grantºbcockbrown.com at lists.samba.org X-BeenThere: 
> samba at lists.samba.org X-Mailman-Version: 2.1.3 List-Post:List-Id: 
> General questions regarding SambaList-Archive:Delivered-To: 
> samba at lists.samba.org X-RAVMilter-Version: 8.4.3(snapshot 20030212) 
> (clientmail2.amicus.com) X-MX-SOURCE-IP: [66.70.73.150] X-Spam-Status: 
> No, hits=-4.9 required=3.5 testsºYES_00 autolearn=ham version=2.61 
> X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) 
> on dp.samba.org X-Spam-Level: X-Original-To: samba at lists.samba.org 
> content-class: urn:content-classes:message Subject: [Samba] Mac OS X 
> client problem with supplementary groups Date: Tue, 13 Jan 2004 
> 17:02:43 -0000 Message-ID: 
> <4DDE71A2-45EA-11D8-B8AB-000A958214B2 at eu.babcockbrown.com> 
> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Samba] Mac OS X 
> client problem with supplementary groups Thread-Index: 
> AcPZ9yQFFdxSFvs6SHS1PyhquhvhQQ== 
> List-Help:List-Subscribe:,List-Unsubscribe:, From: "Gordon Grant" To:
>
> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind
> support compiled into it.  I have noticed a strange problem with
> supplementary groups I noticed with Mac OS X (10.3.2).  The SAMBA
> server is using 'ntdomain' authentication.
>
> When someone connects to the SAMBA server and gives their username in
> uppercase (the OS's default), then none of the secondary UNIX groups
> the user is a member of is picked up.  If exactly the same connect is
> made, but with the username in lowercase, then the groups are picked
> up.
>
> I have verified this in debug logs (can post) -- this seems v. odd to
> me, surely I must be missing something here??
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba