Still problems with 3.0.9 and AD WAS::Re: [Samba] Problem with lowercase Computernames in winbind samba 3.0.8

[Hansjoerg Maurer]

Hi

I reported a problem with samba as a AD-memberserver two weeks ago.
If you acess a share with a W2k client (rmts1) the
following message appears
 Username NTROBOTIC\rmts1$ is invalid on this system
If I access the share on the samba server
via a network-resource (Network-neighbourghood->add-network-resource)
the message appears for each file on the server.
Therefore it takes about 10 seconds to list the contents of a directory 
with 20 files.

If I access the share with smbclient, no error occurs...
 
In smbd/sesssetup.c Line 252 there seems to be a call to
pw = smb_getpwnam( user, real_username, True );
with user = rmts1$ (the machine name)

Because the call fails, I disabled it, if username is a machinename 
(Line 246)
by adding the following code
 
fstring username;
fstrcpy( username, user );

if (username[strlen(username)-1] == '$')
{
       return ERROR_NT(NT_STATUS_LOGON_FAILURE);
}

This speeds up the behavior, but it is just a poor workarround test case 
of someone,
who has not been writing a line of C-code the last 8 years (the above 
part is copied from another place)....

Is the smb_getpwnam call necessary for machines?

I get the unix-users from NIS.
Do I need winbind (I am running it, and wbinfo -g/u works)?
Do I need to adjust nsswitch.conf in order to get the machines appear in 
getent passwd
(I tried it, it works, but it does not solve the problem above and it 
duplicates usernames (nis+winbindd))

Thank you very much

Hansjörg





[2004/11/19 19:45:48, 3] smbd/sesssetup.c:reply_spnego_kerberos(179)
  Ticket name is [rmts1$@NTROBOTIC.ROBOTIC.DLR.DE]
[2004/11/19 19:45:48, 10] smbd/sesssetup.c:reply_spnego_kerberos(221)
  Mapping [NTROBOTIC.ROBOTIC.DLR.DE] to short name
[2004/11/19 19:45:48, 10] smbd/sesssetup.c:reply_spnego_kerberos(234)
  Mapped to [NTROBOTIC]
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam(293)
  Finding user NTROBOTIC\rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(223)
  Trying _Get_Pwnam(), username as lowercase is ntrobotic\rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(230)
  Trying _Get_Pwnam(), username as given is NTROBOTIC\rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(239)
  Trying _Get_Pwnam(), username as uppercase is NTROBOTIC\RMTS1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(247)
  Checking combinations of 0 uppercase letters in ntrobotic\rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(251)
  Get_Pwnam_internals didn't find user [NTROBOTIC\rmts1$]!
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam(293)
  Finding user rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(223)
  Trying _Get_Pwnam(), username as lowercase is rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(239)
  Trying _Get_Pwnam(), username as uppercase is RMTS1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(247)
  Checking combinations of 0 uppercase letters in rmts1$
[2004/11/19 19:45:48, 5] lib/username.c:Get_Pwnam_internals(251)
  Get_Pwnam_internals didn't find user [rmts1$]!
[2004/11/19 19:45:48, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
  Username NTROBOTIC\rmts1$ is invalid on this system





Gerald (Jerry) Carter schrieb:

> Hansjoerg Maurer wrote:
> | Hi,
> |
> | we have several samba servers running as AD members (w2003 domain).
> | Since the Upgrade to samba 3.0.8 the following message appears,
> | when accessing a share on the memberserver from clienthost rmts2.
> |
> |
> | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
> |  Username NTROBOTIC\rmts2$ is invalid on this system
> | [2004/11/10 12:09:02, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
> |  Username NTROBOTIC\rmts2$ is invalid on this system
> |
> | [root at rmcs31 samba]# wbinfo -u | grep -i  rmts2
> | NTROBOTIC\RMTS2$
> |
> | Cound that be a case Problem rmts2 ne RMTS2
>
> Nope.  I don't think so.  Probably an issue with you
> libnss_winbind.so installation.
>
> does 'getent passwd NTROBOTIC\rmts2$' return an entry ?
>
>
>
>
> cheers, jerry


-- 
Dr. Hansjoerg Maurer
itsystems Deutschland AG
Linprunstr. 10
D-80335 Muenchen
Ph/Fax +49 89 52 04 68-41/-59


-- 
_________________________________________________________________

Dr.  Hansjoerg Maurer           | LAN- & System-Manager
                                |
Deutsches Zentrum               | DLR Oberpfaffenhofen
  f. Luft- und Raumfahrt e.V.   |
Institut f. Robotik             |
Postfach 1116                   | Muenchner Strasse 20
82230 Wessling                  | 82234 Wessling
Germany                         |
                                |
Tel: 08153/28-2431              | E-mail: Hansjoerg.Maurer at dlr.de
Fax: 08153/28-1134              | WWW: http://www.robotic.dlr.de/
__________________________________________________________________


There are 10 types of people in this world, 
those who understand binary and those who don't.