[Samba] winbind and white spaces on user/group names

[Rowland Penny]

On Tue, 18 Apr 2017 17:47:55 +0200
Thomas Creutz via samba <samba at lists.samba.org> wrote:

> Hi Samba Folks,
> 
> we use Ubuntu 16.04 LTS with Samba 4.3.11 (from distribution). Our
> ADS is Windows 2008 R2. We want to use Linux as a squid proxy with
> domain auth (SSO).
> Problem is, that most of the usernames have a white space and it
> seems that winbind wont handle it.
> 
> I get this on my cache log with /usr/lib/squid/ext_wbinfo_group_acl 
> (wbinfo_group.pl) script.
> 
> Got max Internet-Access from squid
> User:  -max-
> Group: -Internet-Accesss-
> SID:   -S-1-5-21-3122064890-3824127986-1965815265-2719-
> GID:   -10004-
> failed to call wbcGetGroups: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get groups for user max
> Sending ERR to squid
> 
> Problem is, that username is not max, it is "max mustermann".

Are you mixing up the users 'cn' and 'samaccountname' ?

The users 'cn' could be 'max mustermann', but the users
'samaccountname' could well be 'max', in fact it can be anything, upto
20 characters long and without spaces.

So the question should be, what is squid asking for ?

Rowland