[Samba] Altered behavior in 3.0.25 and 3.0.24-gc-1

Gerald (Jerry) Carter jerry at samba.org
Tue May 22 12:53:07 GMT 2007

Hash: SHA1

Jean-Jacques Moulis wrote:

> GC> > Since upgrading to 3.0.25 and regressing to 
> GC> > 3.0.24-gc-1 some users couldn't
> GC> > print (strange considering map to guest = Bad Password)
> GC> > 
> GC> > they got an NT_STATUS_UNSUCCESSFUL in log files and were refused printing.
> GC> > 
> GC> > The common denominator for users with print problems was 
> GC> > the lack of mapping from their GID to a SID
> The gc-2 snapshot gives the same result for people with an 
> unmapped GID (or not explicitly in the Domain User group -513)
> I have a log level 10 for both the PDC and the domain member.
> How should I made it available to you?

Just gzip it and mail it to me directly.

> As I said, mapping the GID to a SID solves the problem, 
> I'm prepared to accept the behavior as feature :-)

The intended behavior is that if the primary Unix gid
does not map to a SID in the user's domain, we drop in the
Domain users SID as the primary group in the NT token.
I can't think of any way this would prevent printing.
Maybe the log files will help.

Anyways, I don't think we'll hold 3.0.25a on this one.

cheers, jerry
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


More information about the samba mailing list