known BUG "multi-byte character set in usernames"
Guenther Deschner
guenther.deschner at suse.de
Thu May 30 07:22:02 GMT 2002
hello,
smb.conf-manpage of 2.2.5pre and HEAD states the bug of "multi-byte character
sets in usernames":
-----8<------------------snip--------------8<--------------
BUG: There is currently a bug in the implementation of
security = domain with respect to multi-byte character set
usernames. The communication with a Domain Controller must
be done in UNICODE and Samba currently does not widen
multi-byte user names to UNICODE correctly, thus a multi-
byte username will not be recognized correctly at the
Domain Controller. This issue will be addressed in a
future release.
----->8------------------snap-------------->8--------------
will this bug be solved in the near future? in 2.2.5 or HEAD?
the main problem with this is that you get crippled wellknown
domain-groups with winbind (on suse linux 8, kernel 2.4.18, samba-2_2)
and german NT-servers where rid200 (Domain Admins) is Domänen-Admins,
and rid202 is Domänen-Gäste.
now wbinfo -g cuts out the UTF8 chars and will show you e.g.
DOMAIN+Domnen-Admins, DOMAIN+Domnen-Gste, etc.
now you cannot set XFS-ACLs properly since neither DOMAIN+Domnen-Admins
nor DOMAIN+Domänen-Admins does resolve back ...
a simple (and ugly) workaround is to create the three domain-groups in
question in /etc/group. with that you still have to keep an eye on the
correct winbind-gid mapping and rid200 appears crippled in security tab.
is there any other workaround for this?
thanks,
guenther
--
Guenther Deschner guenther.deschner at suse.de
SuSE Linux AG GnuPG: 8EE11688
Berliner Str. 27 phone: +49 (0) 30 / 430944778
D-13507 Berlin fax: +49 (0) 30 / 43732804
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20020530/d089ebac/attachment.bin
More information about the samba-technical
mailing list