samba - Nov 2009 - Other troubles

Hello again.

There are some more issues I still couldn't fix, and can't say if
it's
only a misunderstanding on my side, something that can't be done or a 
bug (I doubt).

1) In our organization we have two "primary" domains (a lot of others,
but they're not interesting here). I tried changing the default 
'PERSONALE' (where machine is joined) to 'STUDENTI' (most users
are in
this one, but I'm not allowed to join a machine to it) with no luck.

2) I can't make users login with their UPN (user.name at studio.unibo.it 
for users in STUDENTI domain, user.name at unibo.it for users in PERSONALE 
domain)

3) It seems "winbind separator" is incompatible with Kerberos login:
if
I specify it, then all logins fail.

Any hints? Some docs I missed?

Thanks!

-- 
Diego Zuccato
Servizi Informatici
Dip. di Astronomia - Universit? di Bologna
Via Ranzani, 1 - 40126 Bologna - Italy
tel.: +39 051 20 95786
mail: diego.zuccato at unibo.it

Diego Zuccato wrote:

Just replying to myself to give some more infos...
> 1) In our organization we have two "primary" domains (a lot of
others,
> but they're not interesting here). I tried changing the default 
> 'PERSONALE' (where machine is joined) to 'STUDENTI' (most
users are in
> this one, but I'm not allowed to join a machine to it) with no luck.
Seems "default domain" gets ignored when security=ads ...
> 2) I can't make users login with their UPN (user.name at
studio.unibo.it
> for users in STUDENTI domain, user.name at unibo.it for users in PERSONALE 
> domain)
Just tested again. But it seems even "wbinfo -n user.name at unibo.it"
isn't resolved. This seems to be a regression (I now updated to 3.4.3, 
but it correctly resolved it in 3.3.8, but even then I couldn't login by 
UPN).
> 3) It seems "winbind separator" is incompatible with Kerberos
login: if
> I specify it, then all logins fail.
And even this still applies.

Attached are the relevant configuration files (might be useful for 
others, for example for the multi-domain consistent id mapping).

-- 
Diego Zuccato
Servizi Informatici
Dip. di Astronomia - Universit? di Bologna
Via Ranzani, 1 - 40126 Bologna - Italy
tel.: +39 051 20 95786
mail: diego.zuccato at unibo.it
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: krb5.conf
URL:
<http://lists.samba.org/pipermail/samba/attachments/20091120/d93eddc2/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: pam_winbind.conf
URL:
<http://lists.samba.org/pipermail/samba/attachments/20091120/d93eddc2/attachment-0001.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: smb.conf
URL:
<http://lists.samba.org/pipermail/samba/attachments/20091120/d93eddc2/attachment-0002.ksh>