Gordon Grant
2004-Jan-13 17:02 UTC
[Samba] Mac OS X client problem with supplementary groups
I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind support compiled into it. I have noticed a strange problem with supplementary groups I noticed with Mac OS X (10.3.2). The SAMBA server is using 'ntdomain' authentication. When someone connects to the SAMBA server and gives their username in uppercase (the OS's default), then none of the secondary UNIX groups the user is a member of is picked up. If exactly the same connect is made, but with the username in lowercase, then the groups are picked up. I have verified this in debug logs (can post) -- this seems v. odd to me, surely I must be missing something here??
John H Terpstra
2004-Jan-13 17:17 UTC
[Samba] Mac OS X client problem with supplementary groups
On Tue, 13 Jan 2004, Gordon Grant wrote:> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind > support compiled into it. I have noticed a strange problem with > supplementary groups I noticed with Mac OS X (10.3.2). The SAMBA > server is using 'ntdomain' authentication. > > When someone connects to the SAMBA server and gives their username in > uppercase (the OS's default), then none of the secondary UNIX groups > the user is a member of is picked up. If exactly the same connect is > made, but with the username in lowercase, then the groups are picked > up. > > I have verified this in debug logs (can post) -- this seems v. odd to > me, surely I must be missing something here??Please post a bug report with a clear example of how to reproduce the problem. The bug reporting site is: https://bugzilla.samba.org Cheers, John T. -- John H Terpstra Email: jht@samba.org
Gordon Grant
2004-Jan-13 17:20 UTC
[Samba] Mac OS X client problem with supplementary groups
forgot to mention: SAMBA server is Solaris 9 using SUN DS 5.2 as LDAP backend for nsswitch.conf. Never get any problems with w2k pro clients connecting to the server -- not even sure if this is a SAMBA issue at all. On 13 Jan 2004, at 17:02, Gordon Grant wrote:> I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind > support compiled into it.? I have noticed a strange problem with > supplementary groups I noticed with Mac OS X (10.3.2).? The SAMBA > server is using 'ntdomain' authentication. > > When someone connects to the SAMBA server and gives their username in > uppercase (the OS's default), then none of the secondary UNIX groups > the user is a member of is picked up.? If exactly the same connect is > made, but with the username in lowercase, then the groups are picked > up. > > I have verified this in debug logs (can post) -- this seems v. odd to > me, surely I must be missing something here?? > > -- > To unsubscribe from this list go to the following URL and read the > instructions:?http://lists.samba.org/mailman/listinfo/samba > X-MimeOLE: Produced By Microsoft Exchange V6.0.6375.0 Received: from > ruiz.eu.babcockbrown.com ([10.64.5.4]) by eumail.eu.babcockbrown.com > with Microsoft SMTPSVC(5.0.2195.5329); Tue, 13 Jan 2004 17:03:18 +0000 > Received: from tiburon.us.babcockbrown.com > (tiburon.us.babcockbrown.com [10.16.5.14]) by ruiz.eu.babcockbrown.com > (8.12.9/8.12.7) with ESMTP id i0DGBNOZ012629 for ; Tue, 13 Jan 2004 > 16:11:24 GMT MIME-Version: 1.0 Content-Type: text/html; > charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > Received: from lombard.babcockbrown.com (localhost [127.0.0.1]) by > tiburon.us.babcockbrown.com (8.12.9/8.12.9) with ESMTP id > i0DH1ZA6023241 for ; Tue, 13 Jan 2004 09:01:35 -0800 (PST) Received: > from clientmail2.amicus.com (clientmail2.amicus.com [208.134.137.26]) > by lombard.babcockbrown.com (8.12.10/8.12.10) with ESMTP id > i0DGopVx026027 for ; Tue, 13 Jan 2004 08:50:51 -0800 (PST) Received: > from p01m171.mxlogic.net (p01m171.mxlogic.net [66.179.109.171]) by > clientmail2.amicus.com (8.12.6/8.12.6) with SMTP id i0DH37TZ007983 for > ; Tue, 13 Jan 2004 11:03:07 -0600 Received: from dp.samba.org > [66.70.73.150] (EHLO lists.samba.org) by p01m171.mxlogic.net > (mxl_mta-1.3.6-0) with ESMTP id 35424004.6382.013.p01m171.mxlogic.net; > Tue, 13 Jan 2004 10:01:07 -0700 (MST) Received: from dp.samba.org > (localhost [127.0.0.1]) by lists.samba.org (Postfix) with ESMTP id > 0858F2C478 for ; Tue, 13 Jan 2004 17:03:02 +0000 (GMT) > Return-Path:X-Mailer: Apple Mail (2.609) X-OriginalArrivalTime: 13 Jan > 2004 17:03:18.0082 (UTC) FILETIME=[2402D220:01C3D9F7] X-MX-Spam: > final=0.0100000000; heur=0.5000000000(0); stat=0.0100000000; > spamtraq=0.5000000000(no match) X-MX-MAIL-FROM:Errors-To: > samba-bounces+gordon.grant?bcockbrown.com@lists.samba.org X-BeenThere: > samba@lists.samba.org X-Mailman-Version: 2.1.3 List-Post:List-Id: > General questions regarding SambaList-Archive:Delivered-To: > samba@lists.samba.org X-RAVMilter-Version: 8.4.3(snapshot 20030212) > (clientmail2.amicus.com) X-MX-SOURCE-IP: [66.70.73.150] X-Spam-Status: > No, hits=-4.9 required=3.5 tests?YES_00 autolearn=ham version=2.61 > X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) > on dp.samba.org X-Spam-Level: X-Original-To: samba@lists.samba.org > content-class: urn:content-classes:message Subject: [Samba] Mac OS X > client problem with supplementary groups Date: Tue, 13 Jan 2004 > 17:02:43 -0000 Message-ID: > <4DDE71A2-45EA-11D8-B8AB-000A958214B2@eu.babcockbrown.com> > X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Samba] Mac OS X > client problem with supplementary groups Thread-Index: > AcPZ9yQFFdxSFvs6SHS1PyhquhvhQQ== > List-Help:List-Subscribe:,List-Unsubscribe:, From: "Gordon Grant" To: > > I have a very simple Samba 3.0.1 install without LDAP/ADS/winbind > support compiled into it.? I have noticed a strange problem with > supplementary groups I noticed with Mac OS X (10.3.2).? The SAMBA > server is using 'ntdomain' authentication. > > When someone connects to the SAMBA server and gives their username in > uppercase (the OS's default), then none of the secondary UNIX groups > the user is a member of is picked up.? If exactly the same connect is > made, but with the username in lowercase, then the groups are picked > up. > > I have verified this in debug logs (can post) -- this seems v. odd to > me, surely I must be missing something here?? > > -- > To unsubscribe from this list go to the following URL and read the > instructions:?http://lists.samba.org/mailman/listinfo/samba