[Samba] winbind and white spaces on user/group names

Rowland Penny rpenny at samba.org
Tue Apr 18 16:27:46 UTC 2017

On Tue, 18 Apr 2017 17:47:55 +0200
Thomas Creutz via samba <samba at lists.samba.org> wrote:

> Hi Samba Folks,
> we use Ubuntu 16.04 LTS with Samba 4.3.11 (from distribution). Our
> ADS is Windows 2008 R2. We want to use Linux as a squid proxy with
> domain auth (SSO).
> Problem is, that most of the usernames have a white space and it
> seems that winbind wont handle it.
> I get this on my cache log with /usr/lib/squid/ext_wbinfo_group_acl 
> (wbinfo_group.pl) script.
> Got max Internet-Access from squid
> User:  -max-
> Group: -Internet-Accesss-
> SID:   -S-1-5-21-3122064890-3824127986-1965815265-2719-
> GID:   -10004-
> failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get groups for user max
> Sending ERR to squid
> Problem is, that username is not max, it is "max mustermann".

Are you mixing up the users 'cn' and 'samaccountname' ?

The users 'cn' could be 'max mustermann', but the users
'samaccountname' could well be 'max', in fact it can be anything, upto
20 characters long and without spaces.

So the question should be, what is squid asking for ?


More information about the samba mailing list