[Samba] Re: ADS valid users can't map share

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greg Adams wrote:
| I'm sorry, I still don't quite follow you.
|
| I have "security = ads", and, as far as I can tell,
| a working kerberos installation, so that means I'm
| using kerberos authentication, right?

Correct.

| From the messages above, that means samba should
| be honoring the domain portion of entries in the
| username map, which it is not doing. Or am I
| using NTLM authentication for some weird reason?

smbd should be honoring entries like

	jerry = AD\gcarter

You can check a level 10 smbd debug log to verify that
the krb5 SNPEGO login is working.

I'll work on getting the NTLM/username map functionality fixed.




cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBdodUIR7qMdg1EfYRAsoNAKDfDj12mHbQtIByveM8h5GMhYJK2QCfeo9g
HmSadb1FMvxE59cwtY+BcjA=
=V897
-----END PGP SIGNATURE-----