[Samba] security = ads parameter not working in samba 4.10.10

[Sérgio Basto]

On Thu, 2019-12-05 at 04:57 +0000, Sérgio Basto via samba wrote:
> On Fri, 2019-11-29 at 18:33 +0000, Rowland penny via samba wrote:
> > On 29/11/2019 18:17, Sérgio Basto via samba wrote:
> > > On Fri, 2019-11-29 at 17:19 +0000, Rowland penny via samba wrote:
> > > > Lets start by removing this: krb5-server-1.15.1-
> > > > 37.el7_7.2.x86_64
> > > ATM I can't, it will remove all samba packages :)
> > 
> > Then your packages are depending on the krb5-server package, which
> > is 
> > MIT, which is experimental. This shouldn't be a problem on a Unix
> > domain 
> > member, but there is absolutely no need for it.
> > 
> > Are absolutely wedded to red-hat, it is so much easier with Debian
> > based 
> > distros ;-)
> 
> OK , removed krb5-server packages , I did a lot of things ( I can
> detail later) , and suddenly it started to work [1] it starts to work
> with one ll [2] note that the first line was not converted only the
> second but when I did the same "ll" again, I got first line correctly
> converted [3] .
> And it start working as expect, 

Sorry , I spoke too soon getent passwd "a new user to this server"
doesn't work . 
But wbinfo -u or wbinfo -g always worked perfectly in any case , why
getent don't ?   


> now in my lab machine I still haven't
> got a successful request [4], I can't find the trick :) .
> 
> 
> [4]
>   Could not convert sid S-1-5-21-2685600491-4108878147-961307473-513:
> NT_STATUS_NONE_MAPPED
> 
> 
> 
> [2]
> ll /srv/samba/users/
> total 24
> drwx------ 2          1000011 domain users 4096 Nov  7 19:21
> administrator
> drwx------ 2 use    domain users 4096 Nov 11 12:12 use
> drwx------ 3 use2           domain users 4096 Nov  7 18:28 use2
> drwx------ 2 use3      domain users 4096 Nov  8 12:32 use3
> drwx------ 2 usee     domain users 4096 Nov  7 15:17 usee
> 
> 
> [3]
> ll /srv/samba/users/
> total 24
> drwx------ 2          administrator domain users 4096 Nov  7 19:21
> administrator
> drwx------ 2 use    domain users 4096 Nov 11 12:12 use
> drwx------ 3 use2           domain users 4096 Nov  7 18:28 use2
> drwx------ 2 use3      domain users 4096 Nov  8 12:32 use3
> drwx------ 2 usee     domain users 4096 Nov  7 15:17 usee
> 
> 
> [1]
> [2019/12/05 03:41:14.726754,  5]
> ../../source3/winbindd/winbindd_getgrgid.c:121(winbindd_getgrgid_recv
> )
>   Could not convert sid S-0-0: NT_STATUS_INVALID_SID
> [2019/12/05 03:41:14.728266,  6]
> ../../source3/winbindd/winbindd.c:969(winbind_client_request_read)
>   closing socket 23, client exited
> [2019/12/05 03:41:20.020502,  6]
> ../../source3/winbindd/winbindd.c:920(new_connection)
>   accepted socket 23
> [2019/12/05 03:41:20.020798,  3]
> ../../source3/winbindd/winbindd_misc.c:432(winbindd_interface_version
> )
>   winbindd_interface_version: [nss_winbind (9484)]: request interface
> version (version = 31)
> [2019/12/05 03:41:20.021194,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000011
> [2019/12/05 03:41:20.057413,  5]
> ../../source3/winbindd/winbindd_getpwuid.c:116(winbindd_getpwuid_recv
> )
>   Could not convert sid S-1-5-21-2685600491-4108878147-961307473-500:
> NT_STATUS_NO_SUCH_USER
> [2019/12/05 03:41:20.058286,  3]
> ../../source3/winbindd/winbindd_getgrgid.c:55(winbindd_getgrgid_send)
>   winbindd_getgrgid_send: [nss_winbind (9484)] getgrgid 1000000
> [2019/12/05 03:41:20.084188,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000012
> [2019/12/05 03:41:20.090949,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000001
> [2019/12/05 03:41:20.100765,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000016
> [2019/12/05 03:41:20.116817,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000017
> [2019/12/05 03:41:20.129758,  3]
> ../../source3/winbindd/winbindd_getpwuid.c:52(winbindd_getpwuid_send)
>   winbindd_getpwuid_send: [nss_winbind (9484)] getpwuid 1000004
> 
> > Rowland
> > 
> > 
> > 
> -- 
> Sérgio M. B.
> 
> 
-- 
Sérgio M. B.