[Samba] Winbind user/group name case change

Alexander Werth werth at linux.vnet.ibm.com
Tue Sep 16 08:58:41 MDT 2014


On Mon, 2014-09-15 at 00:01 +0200, Lars Hanke wrote:
> My Synology NAS runs Samba 3.6.9 and maps accounts using winbind. It is 
> joined to my samba4 AD. I set "winbind use default domain=yes" and have 
> no entry for "winbind normalize names". Strangely a group like "Domain 
> Users" appears as "domain users", i.e. in all lower case. A translation 
> which breaks idmapd for NFSv4.
> 
> My Debian Wheezy 3.6.6 behaves the same way. Is there some option to 
> keep the case?
> 
> Alternatively, does someone know whether it is possible to tell idmapd 
> to ignore case?
> 
> Thanks for your help,
>   - lars.

Hi,

isn't that exactly what I just addressed with the patch for the new
"winbind preserve case" option last week?
Email: [PATCH] Re: winbindd: Add option to preserve case of user names and groups

On Mon, Sep 08, 2014 at 04:39:01PM +0200, Alexander Werth wrote:
> Hi,
> 
> I've encountered an use case where the enforced canonicalization of user
> names and groups to lower case by winbind creates problems and written a
> patch to make this optional.
> The use case is the generation of user names from uid's and gid's for
> NFS4 ACLs on a system using winbind as nss backend.
> NFS4 clients are typically not case insensitive unless they are using
> winbind as well. In particular some nfs4 clients use nss ldap to resove
> the same names winbind get's from the AD.
> If the winbind on the server enforces lower case user and group names
> these names will not be recognized on the clients.
...

Could you please try that out and check if it addresses your need?

Cheers,
Alexander Werth




More information about the samba mailing list