samba - Sep 2014 - Winbind user/group name case change

My Synology NAS runs Samba 3.6.9 and maps accounts using winbind. It is 
joined to my samba4 AD. I set "winbind use default domain=yes" and
have
no entry for "winbind normalize names". Strangely a group like
"Domain
Users" appears as "domain users", i.e. in all lower case. A
translation
which breaks idmapd for NFSv4.

My Debian Wheezy 3.6.6 behaves the same way. Is there some option to 
keep the case?

Alternatively, does someone know whether it is possible to tell idmapd 
to ignore case?

Thanks for your help,
  - lars.

Lars Hanke wrote:
> My Synology NAS runs Samba 3.6.9 and maps accounts using winbind. It 
> is joined to my samba4 AD. I set "winbind use default domain=yes"
and
> have no entry for "winbind normalize names". Strangely a group
like
> "Domain Users" appears as "domain users", i.e. in all
lower case. A
> translation which breaks idmapd for NFSv4.
>
> My Debian Wheezy 3.6.6 behaves the same way. Is there some option to 
> keep the case?
>
> Alternatively, does someone know whether it is possible to tell idmapd 
> to ignore case?
----
    This is a known bug in samba -- "name mangling".  MS fixed this
back in
2000, but samba has remained steadfast.  It wreaks havok with linux 
systems --
especially ones trying to support MS systems.

Besides the user& groupnames, system and domain names also cause problems.

I still have 3 different entries for many of my hosts so linux can 
compensate
for this bug.    I thought this was supposed to be fixed going with 4.x 
and one of the reasons
for not fixing it in earlier versions was the 3.x series didn't know how 
to do unicode
capitalization, but theoretically in 4.x that shouldn't be a problem 
anymore.

Anyyone else know if the name mangling of servers/systems, names and 
groups was
fixed in 4.x?

On Mon, 2014-09-15 at 00:01 +0200, Lars Hanke wrote:
> My Synology NAS runs Samba 3.6.9 and maps accounts using winbind. It is 
> joined to my samba4 AD. I set "winbind use default domain=yes"
and have
> no entry for "winbind normalize names". Strangely a group like
"Domain
> Users" appears as "domain users", i.e. in all lower case. A
translation
> which breaks idmapd for NFSv4.
> 
> My Debian Wheezy 3.6.6 behaves the same way. Is there some option to 
> keep the case?
> 
> Alternatively, does someone know whether it is possible to tell idmapd 
> to ignore case?
> 
> Thanks for your help,
>   - lars.
Hi,

isn't that exactly what I just addressed with the patch for the new
"winbind preserve case" option last week?
Email: [PATCH] Re: winbindd: Add option to preserve case of user names and
groups

On Mon, Sep 08, 2014 at 04:39:01PM +0200, Alexander Werth
wrote:
> Hi,
> 
> I've encountered an use case where the enforced canonicalization of
user
> names and groups to lower case by winbind creates problems and written a
> patch to make this optional.
> The use case is the generation of user names from uid's and gid's
for
> NFS4 ACLs on a system using winbind as nss backend.
> NFS4 clients are typically not case insensitive unless they are using
> winbind as well. In particular some nfs4 clients use nss ldap to resove
> the same names winbind get's from the AD.
> If the winbind on the server enforces lower case user and group names
> these names will not be recognized on the clients.
...

Could you please try that out and check if it addresses your need?

Cheers,
Alexander Werth