[Samba] valid-users still not work in 3.0.23a

[simo]

On Mon, 2006-07-31 at 17:31 +0200, Andreas Sachs wrote:
> > On Mon, 2006-07-31 at 16:58 +0200, Andreas Sachs wrote:
> >> > On Sun, Jul 30, 2006 at 06:31:40PM +0200, Andreas Sachs wrote:
> >> >> Hello,
> >> >> i was using the debian version of samba 3.0.14a. Everything works
> >> >> fine.
> >> >> Then I upgraded to 3.0.23 because of Windows Visa support. After that
> >> >> upgrade shares with "valid users" could not be accessed. So I waited
> >> >> for
> >> >> 3.0.23a and upgraded to this version. The problem still exists. The
> >> >> following message is in the log: User andi not in 'valid users'.
> > [...]
> >> the problem only appears if the username is mapped with a username map.
> >> Example:
> >>
> >> usernamemap:
> >> <serveruser> = <clientuser>
> >> ---------
> >> smb.conf:
> >> ...
> >> valid users = <serveruser>
> >> ...
> >> ---------
> >> smbclient -U <serveruser> ...
> >> ->everything is ok
> >>
> >> smbclient -U <clientuser> ...
> >> ->tree connect failed: NT_STATUS_ACCESS_DENIED
> >>
> >> in the serverlog:
> >> User <serveruser> not in 'valid users'
> >>
> >> The server recognize the mapping, because the translated username is in
> >> the log.
> >>
> >>
> >> You asked me to post the smbclient log. Do you really want this log,
> >> because the error message (User andi not in 'valid users') is from the
> >> server log.
> 
> > Please send in a log level 10 of the smbd server.
> 
> Hello,
> client user: Administrator
> server user: root (mapped with username map)
> 
> valid users = root
> 
> 
> Logfile:

Can you send your smb.conf as well as pdbedit -L
and net groupmap list output ?

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org