[Samba] Strange Usermapping problem with 3.0.23b

[Matthias Schuendehuette]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello List,

Yesterday evening I upgraded my FreeBSD 5.5-RELEASE Server from Samba  
3.0.22 to 3.0.23. This gave me a LOT of work today... :-(

This is what I found so far:

My Samba-Server is member of a large ADS-Domain. After the upgrade,  
file based Usermapping didn't work anymore... better: it worked  
TWICE. (I once opened a PR for that a few years ago :-). So, with  
LogLevel 3:

<DOMAIN>\<WinUser> is mapped to <UnixUser>
<DOMAIN>\<UnixUser> is mapped to <DefaultUser>

(I have a line "<DefaultUser> = *" in my 'smbusers.map'-file)

These two lines are immediately following each other, no other log  
lines in between...

I said this happens on 3.0.23, I verified the same behaviour on  
3.0.23b as well.

The very strange thing (at least for me :-) is, that somehow it seems  
to be dependend from the name resolution (I have 'wins host bcast' in  
my smb.conf):

If I address the Sambaserver with its WINSname (\\SambaServer),  
usermapping happens TWICE.

If I use its IP-Address, usermapping happens ONCE (i.e. correctly).

If I use the DNS-Name of the AD-Domain (\ 
\sambaserver.ad.company.com), usermapping happens TWICE.

If I use another DNS-Domain (\\sambaserver.location.company.de),  
usermapping happens ONCE (i.e. correctly).

I found this more or less by accident, fortunately I'm DNS-Admin of  
'location.company.de' :-) so I could try a different DNS-Name...

Somehow it seems to me, that the DomainController submits some  
strange informations which irritates my SambaServer...

Needless to say that this didn't occur with samba-3.0.22. It doesn't  
occur on another large ADS-Domain either (where I had my Test- 
Machine), but this is of no use for me, I cannot switch the Domain  
the server is in... :-(

Any Ideas anybody? Some other test to narrow he error down? I'm  
willing to cooperate as much as possible, the Samba-Server has >100  
productive users...

Thanks in advance - Matthew

- -- 
Ciao/BSD - Matthias

Matthias Schuendehuette    <msch [at] snafu.de>, Berlin (Germany)
PGP-Key at <pgp.mit.edu> and <wwwkeys.de.pgp.net> ID: 0xDDFB0A5F

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFE5MZTf1BNcN37Cl8RAsMaAJ9O2AAXFiY9CednWmyk9pMt42gKPgCfQ6O4
mAyXW04EuITOUvGr9J2O7VU=
=9f0z
-----END PGP SIGNATURE-----