samba - May 2012 - username map not working to 3.6.3 (security =ADS)

Hi all,
?
i'm working on solaris 10 with compiling samba version 3.6.3.
My box is client?of LDAP on solaris server
Server Samba is domain member of AD Windows 2008R2
Kerberos is configured to link to AD Windows 2008R2.
?
I'm not use windbind in my configuration.
?
I've got this messages 
?
[2012/04/27 13:39:10.550408,? 3]
auth/user_krb5.c:50(get_user_from_kerberos_info)
? Kerberos ticket principal name is [Minh.HUYNH at EXAMPLE.COM]
[2012/04/27 13:39:10.550519,? 3] auth/user_util.c:402(map_username)
? Mapped user ALFRGIS\user-metal to metal
[2012/04/27 13:39:10.571135,? 3] auth/auth_util.c:1028(check_account)
? Failed to find authenticated user ALFRGIS\user-metal via getpwnam(), denying
access.
[2012/04/27 13:39:10.571221,? 1] auth/user_krb5.c:211(make_server_info_krb5)
? make_server_info_info3 failed: NT_STATUS_NO_SUCH_USER!
[2012/04/27 13:39:10.571284,? 1] smbd/sesssetup.c:379(reply_spnego_kerberos)
? make_server_info_krb5 failed!
[2012/04/27 13:39:10.571359,? 3] smbd/error.c:81(error_packet_set)
? error packet at smbd/sesssetup.c(383) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2012/04/27 13:39:12.804376,? 3] smbd/server_exit.c:180(exit_server_common)
? Server exit (failed to receive smb request)
~

It is a bug or config error ?
?
regards

Hi

On 03.05.2012 09:32, aikinhdo at yahoo.fr wrote:
> Hi all,
>
> i'm working on solaris 10 with compiling samba version 3.6.3.
> My box is client of LDAP on solaris server
> Server Samba is domain member of AD Windows 2008R2
> Kerberos is configured to link to AD Windows 2008R2.
>
> I'm not use windbind in my configuration.
>
> I've got this messages
>
> [2012/04/27 13:39:10.550408,  3]
auth/user_krb5.c:50(get_user_from_kerberos_info)
>    Kerberos ticket principal name is [Minh.HUYNH at EXAMPLE.COM]
> [2012/04/27 13:39:10.550519,  3] auth/user_util.c:402(map_username)
>    Mapped user ALFRGIS\user-metal to metal
> [2012/04/27 13:39:10.571135,  3] auth/auth_util.c:1028(check_account)
>    Failed to find authenticated user ALFRGIS\user-metal via getpwnam(),
denying access.
> [2012/04/27 13:39:10.571221,  1]
auth/user_krb5.c:211(make_server_info_krb5)
>    make_server_info_info3 failed: NT_STATUS_NO_SUCH_USER!
> [2012/04/27 13:39:10.571284,  1]
smbd/sesssetup.c:379(reply_spnego_kerberos)
>    make_server_info_krb5 failed!
> [2012/04/27 13:39:10.571359,  3] smbd/error.c:81(error_packet_set)
>    error packet at smbd/sesssetup.c(383) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
> [2012/04/27 13:39:12.804376,  3] smbd/server_exit.c:180(exit_server_common)
>    Server exit (failed to receive smb request)
> ~
>
> It is a bug or config error ?
>
> regards
I have a usermap problem which sounds similar after an upgrade from 
3.5.13 to 3.6.4 with security=ADS too
I opend a bug with a level 10 debug log

https://bugzilla.samba.org/show_bug.cgi?id=8881


regards

Hansj?rg



-- 

??????????????????????????

Deutsches Zentrum f?r Luft- und Raumfahrt e.V. (DLR)

Robotik und Mechatronik Zentrum | M?nchner Strasse 20 | 82234 Wessling

Dr. Hansj?rg Maurer | Telefon 08153 28-2431 | Telefax 08153 28-1134 |
Hansjoerg.Maurer at dlr.de

www.DLR.de

Somebody has this issue ?

I add something, in the smb.conf i'm used usermap for my unix user and my
domain user

regards 


________________________________
 De?: "aikinhdo at yahoo.fr" <aikinhdo at yahoo.fr>
??: "samba at lists.samba.org" <samba at lists.samba.org> 
Envoy? le : Jeudi 3 mai 2012 9h32
Objet?: username map not working to 3.6.3 (security =ADS)
 

Hi all,
?
i'm working on solaris 10 with compiling samba version 3.6.3.
My box is client?of LDAP on solaris server
Server Samba is domain member of AD Windows 2008R2
Kerberos is configured to link to AD Windows 2008R2.
?
I'm not use windbind in my configuration.
?
I've got this messages 
?
[2012/04/27 13:39:10.550408,? 3]
auth/user_krb5.c:50(get_user_from_kerberos_info)
? Kerberos ticket principal name is [Minh.HUYNH at EXAMPLE.COM]
[2012/04/27 13:39:10.550519,? 3] auth/user_util.c:402(map_username)
? Mapped user ALFRGIS\user-metal to metal
[2012/04/27 13:39:10.571135,? 3] auth/auth_util.c:1028(check_account)
? Failed to find authenticated user ALFRGIS\user-metal via getpwnam(), denying
access.
[2012/04/27 13:39:10.571221,? 1] auth/user_krb5.c:211(make_server_info_krb5)
? make_server_info_info3 failed: NT_STATUS_NO_SUCH_USER!
[2012/04/27 13:39:10.571284,? 1] smbd/sesssetup.c:379(reply_spnego_kerberos)
? make_server_info_krb5 failed!
[2012/04/27 13:39:10.571359,? 3]
 smbd/error.c:81(error_packet_set)
? error packet at smbd/sesssetup.c(383) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2012/04/27 13:39:12.804376,? 3] smbd/server_exit.c:180(exit_server_common)
? Server exit (failed to receive smb request)
~

It is a bug or config error ?
?
regards