[Samba] Problem when "valid users" is used

[Arnaud BLONDEL - Alter Way Solutions]

Same problem with :

valid users = @"MYDOM\Developpeurs"


  string_to_sid: Sid @MYDOM\Developpeurs does not start with 'S-'.
[2010/09/30 09:08:17,  5] smbd/password.c:user_in_netgroup(425)
   Unable to get default yp domain, let's try without specifying it
[2010/09/30 09:08:17,  5] smbd/password.c:user_in_netgroup(429)
   looking for user test of domain (ANY) in netgroup MYDOM\Developpeurs
[2010/09/30 09:08:17,  5] smbd/password.c:user_in_netgroup(445)
   looking for user test of domain (ANY) in netgroup MYDOM\Developpeurs
[2010/09/30 09:08:17, 10] passdb/lookup_sid.c:lookup_name(69)
   lookup_name: MYDOM\Developpeurs => MYDOM (domain), Developpeurs (name)
[2010/09/30 09:08:17, 10] passdb/lookup_sid.c:lookup_name(70)
   lookup_name: flags = 0x077
[2010/09/30 09:08:17, 10] passdb/util_wellknown.c:lookup_wellknown_name(151)
   map_name_to_wellknown_sid: looking up Developpeurs
[2010/09/30 09:08:17,  3] smbd/sec_ctx.c:push_sec_ctx(224)
   push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2010/09/30 09:08:17,  3] smbd/uid.c:push_conn_ctx(388)
   push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2010/09/30 09:08:17,  3] smbd/sec_ctx.c:set_sec_ctx(324)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2010/09/30 09:08:17,  5] auth/token_util.c:debug_nt_user_token(522)
   NT user token: (NULL)
[2010/09/30 09:08:17,  5] auth/token_util.c:debug_unix_user_token(548)
   UNIX token of user 0
   Primary group is 0 and contains 0 supplementary groups
[2010/09/30 09:08:17,  5] lib/smbldap.c:smbldap_search_ext(1205)
   smbldap_search_ext: base => [ou=Groups,dc=company,dc=com], filter => 
[(&(objectClass=sambaGroupMapping)(|(displayName=Developpeurs)(cn=Developpeurs)))], 
scope => [2]
[2010/09/30 09:08:17,  2] passdb/pdb_ldap.c:init_group_from_ldap(2348)
   init_group_from_ldap: Entry found for group: 1005
[2010/09/30 09:08:17,  3] smbd/sec_ctx.c:pop_sec_ctx(432)
   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2010/09/30 09:08:17, 10] passdb/passdb.c:lookup_global_sam_name(620)
   Found group Developpeurs 
(S-1-5-21-1003513250-1319205365-1235820382-1015) not in our domain -- 
ignoring.User test not in 'valid users'
[2010/09/30 09:08:17,  2] smbd/service.c:create_connection_server_info(663)
   user 'test' (from session setup) not permitted to access this share 
(Images)
[2010/09/30 09:08:17,  0] smbd/service.c:make_connection_snum(744)
   create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/30 09:08:17,  3] smbd/error.c:error_packet_set(61)
   error packet at smbd/reply.c(724) cmd=117 (SMBtconX) 
NT_STATUS_ACCESS_DENIED


On 30/09/2010 01:51, John H Terpstra wrote:
> On 09/29/2010 12:32 PM, Arnaud BLONDEL - Alter Way Solutions wrote:
>> Copy and paste are wrong but I have this problem with all users.
>>
>> I don't understand the first error : "string_to_sid: Sid @Developpeurs
>> does not start with 'S-'"
>>
>> On 29/09/2010 18:59, Allen Chen wrote:
>>
>>> Are you talking about uid=test or uid=test ?
>>>
>>
>
> Please specify the "valid user" parameters as shown here:
>
> Either:
> 	valid users = @"Company\Developpeurs"
>
> Or as:
> 	valid userse = @%D\Developpeurs
>
> Cheers,
> John T.


-- 
Arnaud BLONDEL
Chargé de projets
ALTER WAY SOLUTIONS - Nord

TD: + 33 (0)3 22 84 04 07
FD: + 33 (0)3 22 84 00 73

44, rue Saint Fursy
80200 PERONNE
www.alterway.fr

Nos prochains événements :

Open World Forum, l'évènement Open Source le plus influent de l'année : 
30 sept - 1er oct 2010, Paris. http://bit.ly/aL6BjO

Open CIO Summit, le 1er sommet animé par les DSI pour les DSI : 30 sept, 
Paris http://bit.ly/bucmEs

Petit-déjeuner thématique « Comment monter son Cloud privé / public ? » 
avec Canonical (Ubuntu) et Owlient, éditeur de jeux communautaires en 
ligne, 9 sept, Paris. http://bit.ly/9FL7cu

Conférence "Hébergement & infogérance d'architectures critiques Magento" 
avec le témoignage de Smartbox, Salon E-Commerce, stand L6, 21-23 
septembre Paris. http://bit.ly/c9sVxH

Conférence "Drupal powers sports (and more) at France Télévisions", 
DrupalCon, 23 - 27 août, Copenhague. http://bit.ly/bakOGx