samba - Nov 2004 - bit by 3.0.8 username map affect on homes share

Samba is a domain member server authenticating to a MS-Windows domain
controller.

With 3.0.7 and all previous version for the past few years I could map a
Windows to Unix userid in the username map file like so..

fred = fredw

His home directory was then accessible as \\servername\fredw so
\\servername\%username% from a Windows NTx client.

I make EXTENSIVE use of that functionality.

I missed the 3.0.8 release where I take it this actually changed but after
spending hours today with the 3.0.9 release today I eventually figure out
that my username map now has to have entries like so..

fred = MYDOMAIN\fredw

fine I can deal with that, but what's killing me is that then a share
named fredw doesn't get automatically created via the [homes] section like
it used to.  

With previous versions of Samba \\servername\fred,
\\servername\homes, and \\servername\fredw where all available.

With the new Samba only \\servername\fred and \\servername\homes are
created, no fredw.

A Windows NT client trying to connect to \\servername\%username% is out of
luck since its effectively using \\servername\fredw.  I have thousands of
such clients.

I have about 14,000 users and over 2500 of them require username mappings
in my username map file and they all access their home share as
\\servername\%username%.

Have mercy on me oh gods of Samba.

Thankyou,
Tom Schaefer
Unix Admistrator
University of Missouri St. Louis

Thanks to nobody I came up with a solution on my own.  All my username map
entries now require two mappings, the domain one which is used for
authentication and just the username by itself which does the homes share.

Like so...

fred = MYDOMAIN\fredw fredw


On Fri, 19 Nov 2004 15:40:36 -0600
Tom Schaefer <tom@umsl.edu> wrote:
> Samba is a domain member server authenticating to a MS-Windows domain
> controller.
> 
> With 3.0.7 and all previous version for the past few years I could map a
> Windows to Unix userid in the username map file like so..
> 
> fred = fredw
> 
> His home directory was then accessible as \\servername\fredw so
> \\servername\%username% from a Windows NTx client.
> 
> I make EXTENSIVE use of that functionality.
> 
> I missed the 3.0.8 release where I take it this actually changed but after
> spending hours today with the 3.0.9 release today I eventually figure out
> that my username map now has to have entries like so..
> 
> fred = MYDOMAIN\fredw
> 
> fine I can deal with that, but what's killing me is that then a share
> named fredw doesn't get automatically created via the [homes] section
like
> it used to.  
> 
> With previous versions of Samba \\servername\fred,
> \\servername\homes, and \\servername\fredw where all available.
> 
> With the new Samba only \\servername\fred and \\servername\homes are
> created, no fredw.
> 
> A Windows NT client trying to connect to \\servername\%username% is out of
> luck since its effectively using \\servername\fredw.  I have thousands of
> such clients.
> 
> I have about 14,000 users and over 2500 of them require username mappings
> in my username map file and they all access their home share as
> \\servername\%username%.
> 
> Have mercy on me oh gods of Samba.
> 
> Thankyou,
> Tom Schaefer
> Unix Admistrator
> University of Missouri St. Louis

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tom Schaefer wrote:

| With previous versions of Samba \\servername\fred,
| \\servername\homes, and \\servername\fredw where
| all available.
|
| With the new Samba only \\servername\fred and
| \\servername\homes are created, no fredw.
|
| A Windows NT client trying to connect to
| \\servername\%username% is out of luck since its
| effectively using \\servername\fredw.
| I have thousands of such clients.

I think you should be able to create a share named

[%U]
	path =  %H
	....

....

and get the old behavior.  The new behavior is more consistent
for domain mode security across bother NTLM and kerberos logons.

| I have about 14,000 users and over 2500 of them
| require username mappings in my username map file
| and they all access their home share as
| \\servername\%username%.
| ...
| Thanks to nobody I came up with a solution on my own.
| ...

Sorry we couldn't meet you timetable.





cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBo1tiIR7qMdg1EfYRAvlsAJ9qI3ci62I3SnuHa+whn5OW3k8bEgCg1Irs
Mv5OhejP++JthvOj4V8HDsU=tVl7
-----END PGP SIGNATURE-----