[Samba] Authentication issue still exists in 3.0.3

[Andrew Bartlett]

On Sat, 2004-05-01 at 03:23, Jay D. Anderson wrote:
> I wrote about this problem more than a week ago, but got no response.  I 
> upgraded to 3.0.3 hoping this issue would go away, but it hasn't.
> 
> I am seeing the problem running Samba 3.0.2a or 3.0.3 on both Solaris 8 
> and RH Linux ES3.  This problem was not present in Samba 2.2.8a.
> 
> The Samba servers are member servers of an Active Directory domain, and 
> all other file and print sharing is working well.  Global section of 
> smb.conf included below.  I am not running winbindd.
> 
> On a Windows XP client that hasn't been added to Active Directory yet, 
> domain credentials will not authenticate to the Samba server if the 
> credentials are given in the form username at mydomain.com.  The same 
> operation against a Windows server works fine.  If the credentials are 
> supplied in other forms to the Samba server, they will work (e.g., 
> mydomain\username, mydomain.com\username).  If the Windows XP client is 
> added to the AD domain, the credentials will work in any of the formats.
> 
>  From an auth:10 debug, it appears Samba is using the entire 
> username at mydomain.com string as the username rather than breaking it 
> into username and domain components.  I have a "log level = 3 auth:10" 
> log file available on request.

Samba simply does not know how to handle this username format.  If you
forward me that log, I can look at it, but is there any urgent reason
why you cannot use the more traditional username formats?

Also, please file a bug on bugzilla.samba.org

(I intend to fix it, it's just a matter of what urgency this is, if
there is a good workaround).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20040501/e05f99b2/attachment.bin