samba - Jan 2004 - Mac OS X client problem with supplementary groups

I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind 
support compiled into it.  I have noticed a strange problem with 
supplementary groups I noticed with Mac OS X (10.3.2).  The SAMBA 
server is using 'ntdomain' authentication.

When someone connects to the SAMBA server and gives their username in 
uppercase (the OS's default), then none of the secondary UNIX groups 
the user is a member of is picked up.  If exactly the same connect is 
made, but with the username in lowercase, then the groups are picked 
up.

I have verified this in debug logs (can post) -- this seems v. odd to 
me, surely I must be missing something here??

On Tue, 13 Jan 2004, Gordon Grant wrote:
> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind
> support compiled into it.  I have noticed a strange problem with
> supplementary groups I noticed with Mac OS X (10.3.2).  The SAMBA
> server is using 'ntdomain' authentication.
>
> When someone connects to the SAMBA server and gives their username in
> uppercase (the OS's default), then none of the secondary UNIX groups
> the user is a member of is picked up.  If exactly the same connect is
> made, but with the username in lowercase, then the groups are picked
> up.
>
> I have verified this in debug logs (can post) -- this seems v. odd to
> me, surely I must be missing something here??
Please post a bug report with a clear example of how to reproduce the
problem. The bug reporting site is:

	https://bugzilla.samba.org

Cheers,
John T.
-- 
John H Terpstra
Email: jht@samba.org

forgot to mention: SAMBA server is Solaris 9 using SUN DS 5.2 as LDAP 
backend for nsswitch.conf.  Never get any problems with w2k pro clients 
connecting to the server -- not even sure if this is a SAMBA issue at 
all.

On 13 Jan 2004, at 17:02, Gordon Grant wrote:
> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind
> support compiled into it.? I have noticed a strange problem with
> supplementary groups I noticed with Mac OS X (10.3.2).? The SAMBA
> server is using 'ntdomain' authentication.
>
> When someone connects to the SAMBA server and gives their username in
> uppercase (the OS's default), then none of the secondary UNIX groups
> the user is a member of is picked up.? If exactly the same connect is
> made, but with the username in lowercase, then the groups are picked
> up.
>
> I have verified this in debug logs (can post) -- this seems v. odd to
> me, surely I must be missing something here??
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:?http://lists.samba.org/mailman/listinfo/samba
> X-MimeOLE: Produced By Microsoft Exchange V6.0.6375.0 Received: from 
> ruiz.eu.babcockbrown.com ([10.64.5.4]) by eumail.eu.babcockbrown.com 
> with Microsoft SMTPSVC(5.0.2195.5329); Tue, 13 Jan 2004 17:03:18 +0000 
> Received: from tiburon.us.babcockbrown.com 
> (tiburon.us.babcockbrown.com [10.16.5.14]) by ruiz.eu.babcockbrown.com 
> (8.12.9/8.12.7) with ESMTP id i0DGBNOZ012629 for ; Tue, 13 Jan 2004 
> 16:11:24 GMT MIME-Version: 1.0 Content-Type: text/html; 
> charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable 
> Received: from lombard.babcockbrown.com (localhost [127.0.0.1]) by 
> tiburon.us.babcockbrown.com (8.12.9/8.12.9) with ESMTP id 
> i0DH1ZA6023241 for ; Tue, 13 Jan 2004 09:01:35 -0800 (PST) Received: 
> from clientmail2.amicus.com (clientmail2.amicus.com [208.134.137.26]) 
> by lombard.babcockbrown.com (8.12.10/8.12.10) with ESMTP id 
> i0DGopVx026027 for ; Tue, 13 Jan 2004 08:50:51 -0800 (PST) Received: 
> from p01m171.mxlogic.net (p01m171.mxlogic.net [66.179.109.171]) by 
> clientmail2.amicus.com (8.12.6/8.12.6) with SMTP id i0DH37TZ007983 for 
> ; Tue, 13 Jan 2004 11:03:07 -0600 Received: from dp.samba.org 
> [66.70.73.150] (EHLO lists.samba.org) by p01m171.mxlogic.net 
> (mxl_mta-1.3.6-0) with ESMTP id 35424004.6382.013.p01m171.mxlogic.net; 
> Tue, 13 Jan 2004 10:01:07 -0700 (MST) Received: from dp.samba.org 
> (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id 
> 0858F2C478 for ; Tue, 13 Jan 2004 17:03:02 +0000 (GMT) 
> Return-Path:X-Mailer: Apple Mail (2.609) X-OriginalArrivalTime: 13 Jan 
> 2004 17:03:18.0082 (UTC) FILETIME=[2402D220:01C3D9F7] X-MX-Spam: 
> final=0.0100000000; heur=0.5000000000(0); stat=0.0100000000; 
> spamtraq=0.5000000000(no match) X-MX-MAIL-FROM:Errors-To: 
> samba-bounces+gordon.grant?bcockbrown.com@lists.samba.org X-BeenThere: 
> samba@lists.samba.org X-Mailman-Version: 2.1.3 List-Post:List-Id: 
> General questions regarding SambaList-Archive:Delivered-To: 
> samba@lists.samba.org X-RAVMilter-Version: 8.4.3(snapshot 20030212) 
> (clientmail2.amicus.com) X-MX-SOURCE-IP: [66.70.73.150] X-Spam-Status: 
> No, hits=-4.9 required=3.5 tests?YES_00 autolearn=ham version=2.61 
> X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) 
> on dp.samba.org X-Spam-Level: X-Original-To: samba@lists.samba.org 
> content-class: urn:content-classes:message Subject: [Samba] Mac OS X 
> client problem with supplementary groups Date: Tue, 13 Jan 2004 
> 17:02:43 -0000 Message-ID: 
> <4DDE71A2-45EA-11D8-B8AB-000A958214B2@eu.babcockbrown.com> 
> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Samba] Mac OS X 
> client problem with supplementary groups Thread-Index: 
> AcPZ9yQFFdxSFvs6SHS1PyhquhvhQQ== 
> List-Help:List-Subscribe:,List-Unsubscribe:, From: "Gordon Grant"
To:
>
> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind
> support compiled into it.? I have noticed a strange problem with
> supplementary groups I noticed with Mac OS X (10.3.2).? The SAMBA
> server is using 'ntdomain' authentication.
>
> When someone connects to the SAMBA server and gives their username in
> uppercase (the OS's default), then none of the secondary UNIX groups
> the user is a member of is picked up.? If exactly the same connect is
> made, but with the username in lowercase, then the groups are picked
> up.
>
> I have verified this in debug logs (can post) -- this seems v. odd to
> me, surely I must be missing something here??
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:?http://lists.samba.org/mailman/listinfo/samba