[Samba] force group to Unix group in 3.0.25

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 21 May 2007, Mike wrote:

> Thanks Jerry, for the fast response to this issue. v3.0.24, as well as 
> gc-1 and gc-2 didn't have the problem for me. (btw, gc-2 is still 
> reported as gc-1 when I did "smbd -V".  I had to change 
> include/version.h manually).

Thanks. Fixed now.  New tarball uploaded (same name).

> Only 3.0.25 had this problem for me. I have tried patching uid.c in 
> 3.0.25 (following the patch you posted in another mail) and it's still 
> not working for me (I have attached more logs/info below). The 
> interesting thing is the winbindd_cache.tdb file (I do purge all the 
> tdbs between each test to be sure nothing is leftover).  There are some 
> entries which are created by 3.0.25 for local Unix groups (gid 561 
> (localgrp) and gid 60001 (nobody)) which are not found in the same file 
> for v3.0.24. Are these cache entries causing the local Unixgroups to be 
> reported as not mapped ?

None of the S-1-22-{1,2} SIDs should be cached since they are generated
directly from a uid/gid.

>
> Thanks,
> Mike
>
> ---------------------------
> The log.smbd errors are still the same as before so I didn't re-include them.
> ----------------------------
> Excerpt from winbindd_cache.tdb for 3.0.25 (3.0.24 doesn't have these entries)
>
> {
> key(15) = "SN/S-1-22-2-561"      <<== 561 is the gid for the Unix group localgrp
> data(8) = "s\00\00\C0\1B\FA\B6\05"
> }
> .....
> {
> key(17) = "SN/S-1-22-2-60001"    <<== 60001 is the gid for the Unix group nobody
> data(8) = "s\00\00\C0\1B\FA\B6\05"
> }
>
> ----------------------------
> log.winbindd - 3.0.25 (patched uid.c)
>
> [2007/05/21 10:33:55, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(681)
>  find_lookup_domain_from_sid(S-1-22-2-561)
> [2007/05/21 10:33:55, 10] nsswitch/winbindd_util.c:find_lookup_domain_from_sid(691)
>  calling find_our_domain
> [2007/05/21 10:33:55, 10] nsswitch/winbindd_cache.c:cache_retrieve_response(2299)
>  Retrieving response for pid 24151
> [2007/05/21 10:33:55, 5] nsswitch/winbindd_async.c:lookupsid_recv(706)
>  lookupsid returned an error
> [2007/05/21 10:33:55, 5] nsswitch/winbindd_sid.c:sid2gid_lookupsid_recv(274)
>  sid2gid_lookupsid_recv: Could not convert get sid type for S-1-22-2-561

I fixed this but I don't remember if it was in the current 3.0.25 svn
or 3.0.26.  I'll backport the fix for 3.0.25a if necessary.






cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQFGUb53IR7qMdg1EfYRAn6YAKCHBDFSw8Jojf4q7lXKVxboh3+aAACdGn1O
dRlMQ9Gg/AK5Nv/PrWTWpUY=
=qWmM
-----END PGP SIGNATURE-----