[Samba] Serious bug in Samba 3.0.2pre1 !!!

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 23 Jan 2004, Alex de Vaal wrote:

> I actually read the WHATSNEW of 3.0.2pre1, but it wasn't that obvious
> for me that I had to disable "winbind use default domain = yes" in my
> configuration. My samba setup was working with 3.0.0-2 and the only
> thing I did was upgrading to 3.0.2pre1 and not changing my smb.conf
> file.

Right.  However, the REALM\user format was a bug IMO and so fixing it
was fixing a bug.  I'm sorry that your working smb.conf make use of the 
behavior.  But it is better to fix it now.

> After your e-mail I changed "winbind use default domain = yes" to
> "winbind use default domain = no" and I upgraded my machine again to
> 3.0.2pre1 and now it is working.

The official statement is that in 'winbind use default domain'
only applies to pam_winbind.  You should always specifiy the 
fully qualified user name in smb.conf for things like 'valid 
users'.  And the format of the winbind user or group should make use of 
the short form of the domain.

> However, I see still in /var/log/samba/<ip-address-W2k-ws>.log "Username
> (null) is invalid on this system" appear, when I "net use" two mappings
> to my samba machine (one to the "grp" and one to the "pub" share) via
> the Wk3 login script. Subjoined the output of the log file when this
> workstation gets the 2 mappings to my samba shares:
> 
> [2004/01/23 15:34:26, 1] smbd/sesssetup.c:reply_spnego_kerberos(248)
>   Username (null) is invalid on this system

This should be fixed in 3.0.2rc1.

> Last question; around which week is the final 3.0.2 release expected?
> (Just curious, no other strings attached. ;)

Probably first of February.



- -- 
cheers, jerry
 ----------------------------------------------------------------------
 Hewlett-Packard            ------------------------- http://www.hp.com
 SAMBA Team                 ---------------------- http://www.samba.org
 GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
 "If we're adding to the noise, turn off this song" --Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFAFdC1IR7qMdg1EfYRAmmTAKCWMXs+jmnByBNgUkgCOmjTY8PKGACgrMQ/
GA4cpWCyefieB+4CaNcGtEQ=
=I9Kb
-----END PGP SIGNATURE-----