[Samba] ntlm_auth with require-membership-of not working

[Dominic Wong]

Hi,

The latest samba from sernet was installed on a new CentOS server. 
  ntlm_auth is implemented with pptpd.  ntlm_auth always return success 
whenever group, username and password are correct.  No matter the user 
is in the group or not.  Is it a bug or I missed something?

The following is detail of my settings and testing result from command line.

OS: CentOS 6.4
Samba version: sernet-samba.x86_64 4.0.10-5.el6
Samba mode: AD

[root at powerpptp samba]# samba-tool group listmembers pptp_user
test_pptp1
[root at powerpptp samba]# wbinfo -n pptp_user
S-1-5-21-463116762-3579576764-3594160179-1110 SID_DOM_GROUP (2)
[root at powerpptp samba]# ntlm_auth --request-nt-key 
--require-membership-of=S-1-5-21-463116762-3579576764-3594160179-1110 
--username=test_pptp1 --password=test_pptp1
NT_STATUS_OK: Success (0x0)
[root at powerpptp samba]# ntlm_auth --request-nt-key 
--require-membership-of=S-1-5-21-463116762-3579576764-3594160179-1110 
--username=test_pptp2 --password=test_pptp2
NT_STATUS_OK: Success (0x0)


Regards,
Dominic