[Samba] username map not working to 3.6.3 (security =ADS)

["Maurer, Hansjörg"]

Hi

On 03.05.2012 09:32, aikinhdo at yahoo.fr wrote:
> Hi all,
>
> i'm working on solaris 10 with compiling samba version 3.6.3.
> My box is client of LDAP on solaris server
> Server Samba is domain member of AD Windows 2008R2
> Kerberos is configured to link to AD Windows 2008R2.


>
> I'm not use windbind in my configuration.
>
> I've got this messages
>
> [2012/04/27 13:39:10.550408,  3] auth/user_krb5.c:50(get_user_from_kerberos_info)
>    Kerberos ticket principal name is [Minh.HUYNH at EXAMPLE.COM]
> [2012/04/27 13:39:10.550519,  3] auth/user_util.c:402(map_username)
>    Mapped user ALFRGIS\user-metal to metal
> [2012/04/27 13:39:10.571135,  3] auth/auth_util.c:1028(check_account)
>    Failed to find authenticated user ALFRGIS\user-metal via getpwnam(), denying access.
> [2012/04/27 13:39:10.571221,  1] auth/user_krb5.c:211(make_server_info_krb5)
>    make_server_info_info3 failed: NT_STATUS_NO_SUCH_USER!
> [2012/04/27 13:39:10.571284,  1] smbd/sesssetup.c:379(reply_spnego_kerberos)
>    make_server_info_krb5 failed!
> [2012/04/27 13:39:10.571359,  3] smbd/error.c:81(error_packet_set)
>    error packet at smbd/sesssetup.c(383) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
> [2012/04/27 13:39:12.804376,  3] smbd/server_exit.c:180(exit_server_common)
>    Server exit (failed to receive smb request)
> ~
>
> It is a bug or config error ?
>
> regards

I have a usermap problem which sounds similar after an upgrade from 
3.5.13 to 3.6.4 with security=ADS too
I opend a bug with a level 10 debug log

https://bugzilla.samba.org/show_bug.cgi?id=8881


regards

Hansjörg



-- 

——————————————————————————

Deutsches Zentrum für Luft- und Raumfahrt e.V. (DLR)

Robotik und Mechatronik Zentrum | Münchner Strasse 20 | 82234 Wessling

Dr. Hansjörg Maurer | Telefon 08153 28-2431 | Telefax 08153 28-1134 | Hansjoerg.Maurer at dlr.de

www.DLR.de