[Samba] Altered behavior in 3.0.25 and 3.0.24-gc-1

Jean-Jacques Moulis jj at isy.liu.se
Mon May 21 17:12:23 GMT 2007

By mistake or by design membership in a Windows Primary Group seems to be mandatory!

We are using printservers configured as member servers of Samba domains.

with the following configuration
        security = DOMAIN
        password server = PDC
        encrypt passwords = yes
        map to guest = Bad Password

The Samba PDCs use plain smbpasswd files.

Since upgrading to 3.0.25 and regressing to 3.0.24-gc-1 some users couldn't
print (strange considering map to guest = Bad Password)

they got an  NT_STATUS_UNSUCCESSFUL in log files and were refused printing.

The common denominator for users with print problems was the lack of mapping
from their GID to a SID

net groupmap add ntgroup="A new group" unixgroup=gidgroupname
solved the problem but it took a while to find out :-)


Jean-Jacques   Moulis                              Tel:  (013) 281684
ISY                                                Fax:  (013) 139282
Linköping University                            E-mail: jj at isy.liu.se
581 83 Linköping

More information about the samba mailing list