Jean-Jacques Moulis
2007-May-21 17:12 UTC
[Samba] Altered behavior in 3.0.25 and 3.0.24-gc-1
By mistake or by design membership in a Windows Primary Group seems to be
mandatory!
We are using printservers configured as member servers of Samba domains.
with the following configuration
security = DOMAIN
password server = PDC
encrypt passwords = yes
map to guest = Bad Password
The Samba PDCs use plain smbpasswd files.
Since upgrading to 3.0.25 and regressing to 3.0.24-gc-1 some users couldn't
print (strange considering map to guest = Bad Password)
they got an NT_STATUS_UNSUCCESSFUL in log files and were refused printing.
The common denominator for users with print problems was the lack of mapping
from their GID to a SID
net groupmap add ntgroup="A new group" unixgroup=gidgroupname
solved the problem but it took a while to find out :-)
Regards!
--
Jean-Jacques Moulis Tel: (013) 281684
ISY Fax: (013) 139282
Link?ping University E-mail: jj@isy.liu.se
581 83 Link?ping
Gerald (Jerry) Carter
2007-May-21 17:32 UTC
[Samba] Altered behavior in 3.0.25 and 3.0.24-gc-1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jean-Jacques Moulis wrote:> By mistake or by design membership in a Windows Primary Group seems to be mandatory! > > We are using printservers configured as member servers of Samba domains. > > with the following configuration > > security = DOMAIN > password server = PDC > encrypt passwords = yes > map to guest = Bad Password > > The Samba PDCs use plain smbpasswd files. > > Since upgrading to 3.0.25 and regressing to 3.0.24-gc-1 some users couldn't > print (strange considering map to guest = Bad Password) > > they got an NT_STATUS_UNSUCCESSFUL in log files and were refused printing. > > The common denominator for users with print problems was > the lack of mapping from their GID to a SID > > net groupmap add ntgroup="A new group" unixgroup=gidgroupname > solved the problem but it took a while to find out :-)Please test the gc-2 snapshot. This might be related to the regression from the CVE-2007-2444 patch. cheers, jerry ====================================================================Samba ------- http://www.samba.org Centeris ----------- http://www.centeris.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGUdeNIR7qMdg1EfYRAgthAJ96RdusUmZSWshB0zgsMR5YiZpM6wCg5avV O52OWqeXKAk1JTrjJSpL/Bs=7F/8 -----END PGP SIGNATURE-----