[Samba] security = ads parameter not working in samba 4.10.10

[Sérgio Basto]

On Fri, 2019-11-29 at 18:33 +0000, Rowland penny via samba wrote:
> On 29/11/2019 18:17, Sérgio Basto via samba wrote:
> > On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote:
> > > Lets start by removing this: krb5-server-1.15.1-37.el7_7.2.x86_64
> > ATM I can't, it will remove all samba packages :)
> 
> Then your packages are depending on the krb5-server package, which
> is 
> MIT, which is experimental. This shouldn't be a problem on a Unix
> domain 
> member, but there is absolutely no need for it.
> 
> Are absolutely wedded to red-hat, it is so much easier with Debian
> based 
> distros ;-)

OK , removed krb5-server packages , I did a lot of things ( I can
detail later) , and suddenly it started to work [1] it starts to work
with one ll [2] note that the first line was not converted only the
second but when I did the same "ll" again, I got first line correctly
converted [3] .
And it start working as expect, now in my lab machine I still haven't
got a successful request [4], I can't find the trick :) .


[4]
  Could not convert sid S-1-5-21-2685600491-4108878147-961307473-513:
NT_STATUS_NONE_MAPPED



[2]
ll /srv/samba/users/
total 24
drwx------ 2          1000011 domain users 4096 Nov  7 19:21
administrator
drwx------ 2 use    domain users 4096 Nov 11 12:12 use
drwx------ 3 use2           domain users 4096 Nov  7 18:28 use2
drwx------ 2 use3      domain users 4096 Nov  8 12:32 use3
drwx------ 2 usee     domain users 4096 Nov  7 15:17 usee


[3]
ll /srv/samba/users/
total 24
drwx------ 2          administrator domain users 4096 Nov  7 19:21
administrator
drwx------ 2 use    domain users 4096 Nov 11 12:12 use
drwx------ 3 use2           domain users 4096 Nov  7 18:28 use2
drwx------ 2 use3      domain users 4096 Nov  8 12:32 use3
drwx------ 2 usee     domain users 4096 Nov  7 15:17 usee


[1]
[2019/12/05 03:41:14.726754,  5]
../../source3/winbindd/winbindd_getgrgid.c:121(winbindd_getgrgid_recv)
  Could not convert sid S-0-0: NT_STATUS_INVALID_SID
[2019/12/05 03:41:14.728266,  6]
../../source3/winbindd/winbindd.c:969(winbind_client_request_read)
  closing socket 23, client exited
[2019/12/05 03:41:20.020502,  6]
../../source3/winbindd/winbindd.c:920(new_connection)
  accepted socket 23
[2019/12/05 03:41:20.020798,  3]
../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version)
  winbindd_interface_version: [nss_winbind (9484)]: request interface
version (version = 31)
[2019/12/05 03:41:20.021194,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000011
[2019/12/05 03:41:20.057413,  5]
../../source3/winbindd/winbindd_getpwuid.c:116(winbindd_getpwuid_recv)
  Could not convert sid S-1-5-21-2685600491-4108878147-961307473-500:
NT_STATUS_NO_SUCH_USER
[2019/12/05 03:41:20.058286,  3]
../../source3/winbindd/winbindd_getgrgid.c:55(winbindd_getgrgid_send)
  winbindd_getgrgid_send: [nss_winbind (9484)] getgrgid 1000000
[2019/12/05 03:41:20.084188,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000012
[2019/12/05 03:41:20.090949,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000001
[2019/12/05 03:41:20.100765,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000016
[2019/12/05 03:41:20.116817,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000017
[2019/12/05 03:41:20.129758,  3]
../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
  winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000004

> 
> Rowland
> 
> 
> 
-- 
Sérgio M. B.