thr3ads.net - samba - [Samba] Samba 3.6.10 not reading groups [Jan 2013]

If this information is useful, please help other people find it:
Share via:

Benjamin Huntsman

2013-Jan-21 18:06 UTC

[Samba] Samba 3.6.10 not reading groups

Helpp! :)  We didn't catch this in testing and now it's killing me in
production!
I'm getting stuck with my fresh build of Samba 3.6.10.  It isn't
honoring groups specified in the valid users clause of the share configuration.
I'm running in security = SHARE mode, and user authentication is working
just fine.  Even if I specify individual users on the valid users = line, it
works.  Just not groups.
Here's my configuration:

# Samba config file created using SWAT
# from UNKNOWN (10.33.224.61)
# Date: 2013/01/21 10:00:00

[global]
	interfaces = 10.33.72.67/22, 127.0.0.1
	bind interfaces only = Yes
	security = SHARE
	encrypt passwords = No
	log level = 3
	os level = 8
	local master = No
	domain master = No
	idmap config * : range = 
	idmap config * : backend = tdb

[testshare]
	path = /testshare
	valid users = +titan, benhu
	read only = No



I'm in the group 'titan' also.  Here's the log I get at log
level = 3:


[2013/01/21 10:03:05.928101,  3] param/loadparm.c:9572(lp_load_ex)
  lp_load_ex: refreshing parameters
[2013/01/21 10:03:05.928257,  3] param/loadparm.c:5192(init_globals)
  Initialising global parameters
[2013/01/21 10:03:05.928594,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/etc/samba-3.6.10/smb.conf"
[2013/01/21 10:03:05.928696,  3] param/loadparm.c:8310(do_section)
  Processing section "[global]"
[2013/01/21 10:03:05.929629,  2] param/loadparm.c:8327(do_section)
  Processing section "[testshare]"
[2013/01/21 10:03:05.929862,  3] param/loadparm.c:6630(lp_add_ipc)
  adding IPC service
[2013/01/21 10:03:05.929926,  1] param/loadparm.c:9670(lp_load_ex)
  WARNING: The security=share option is deprecated
[2013/01/21 10:03:05.930333,  2] lib/interface.c:479(interpret_interface)
  interpret_interface: Adding interface 10.33.72.67/22
[2013/01/21 10:03:05.930401,  2] lib/interface.c:341(add_interface)
  added interface 10.33.72.67/22 ip=10.33.72.67 bcast=10.33.75.255
netmask=255.255.252.0
[2013/01/21 10:03:05.930493,  2] lib/interface.c:341(add_interface)
  added interface lo0 ip=127.0.0.1 bcast=127.242.234.223 netmask[2013/01/21
10:03:05.930626,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.33.75.164 (10.33.75.164)
[2013/01/21 10:03:05.930715,  3] smbd/oplock.c:922(init_oplocks)
  init_oplocks: initializing messages.
[2013/01/21 10:03:05.930887,  3] smbd/process.c:1662(process_smb)
  Transaction 0 of length 159 (0 toread)
[2013/01/21 10:03:05.930970,  3] smbd/process.c:1467(switch_message)
  switch message SMBnegprot (pid 7864494) conn 0x0
[2013/01/21 10:03:05.931110,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2013/01/21 10:03:05.931178,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LANMAN1.0]
[2013/01/21 10:03:05.931245,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [Windows for Workgroups 3.1a]
[2013/01/21 10:03:05.931313,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LM1.2X002]
[2013/01/21 10:03:05.931379,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LANMAN2.1]
[2013/01/21 10:03:05.931445,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [NT LM 0.12]
[2013/01/21 10:03:05.931511,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [SMB 2.002]
[2013/01/21 10:03:05.931577,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [SMB 2.???]
[2013/01/21 10:03:05.931749,  3] smbd/negprot.c:401(reply_nt1)
  not using SPNEGO
[2013/01/21 10:03:05.931811,  3] smbd/negprot.c:704(reply_negprot)
  Selected protocol NT LM 0.12
[2013/01/21 10:03:05.933695,  3] smbd/process.c:1662(process_smb)
  Transaction 1 of length 176 (0 toread)
[2013/01/21 10:03:05.933776,  3] smbd/process.c:1467(switch_message)
  switch message SMBsesssetupX (pid 7864494) conn 0x0
[2013/01/21 10:03:05.933865,  3] smbd/sesssetup.c:1333(reply_sesssetup_and_X)
  wct=13 flg2=0xc807
[2013/01/21 10:03:05.933953,  3] smbd/sesssetup.c:1536(reply_sesssetup_and_X)
  Domain=[10.33.72.67]  NativeOS=[] NativeLanMan=[] PrimaryDomain=[null]
[2013/01/21 10:03:05.934049,  2] smbd/sesssetup.c:1279(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2013/01/21 10:03:05.934111,  3] smbd/sesssetup.c:1552(reply_sesssetup_and_X)
  sesssetupX:name=[10.33.72.67]\[benhu]@[10.33.75.164]
[2013/01/21 10:03:05.934785,  3] smbd/sesssetup.c:151(check_guest_password)
  Got anonymous request
[2013/01/21 10:03:05.934884,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2013/01/21 10:03:05.934976,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: []\[]@[]
[2013/01/21 10:03:05.935069,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: guest authentication for user [] succeeded
[2013/01/21 10:03:05.935149,  3] smbd/process.c:1467(switch_message)
  switch message SMBtconX (pid 7864494) conn 0x0
[2013/01/21 10:03:05.935249,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.33.75.164 (10.33.75.164)
[2013/01/21 10:03:05.935974,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[WORKGROUP]\[benhu]@[10.33.75.164] with the new password interface
[2013/01/21 10:03:05.936047,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: [SYSTST]\[benhu]@[10.33.75.164]
[2013/01/21 10:03:05.948794,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for benhu
[2013/01/21 10:03:05.951568,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: unix authentication for user [benhu] succeeded
[2013/01/21 10:03:05.951650,  2] auth/auth.c:309(check_ntlm_password)
  check_ntlm_password:  authentication for user [benhu] -> [benhu] ->
[benhu] succeeded
[2013/01/21 10:03:05.951730,  3] smbd/password.c:651(authorise_login)
  authorise_login: ACCEPTED: session list username (benhu) and given password ok
[2013/01/21 10:03:05.952894,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for benhu
[2013/01/21 10:03:05.956892,  3] auth/token_util.c:438(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.957049,  3] auth/token_util.c:469(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.958295,  3] smbd/service.c:872(make_connection_snum)
  Connect path is '/tmp' for service [IPC$]
[2013/01/21 10:03:05.958395,  3] smbd/vfs.c:102(vfs_init_default)
  Initialising default vfs hooks
[2013/01/21 10:03:05.958465,  3] smbd/vfs.c:128(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2013/01/21 10:03:05.958716,  3] smbd/service.c:1114(make_connection_snum)
  10.33.75.164 (10.33.75.164) connect to service IPC$ initially as user benhu
(uid=1565, gid=209) (pid 7864494)
[2013/01/21 10:03:05.958815,  3] smbd/reply.c:871(reply_tcon_and_X)
  tconX service=IPC$
[2013/01/21 10:03:05.959471,  3] smbd/process.c:1662(process_smb)
  Transaction 2 of length 120 (0 toread)
[2013/01/21 10:03:05.959542,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x1100e4e80
[2013/01/21 10:03:05.959670,  3] smbd/msdfs.c:891(get_referred_path)
  get_referred_path: |testshare| in dfs path \10.33.72.67\testshare is not a dfs
root.
[2013/01/21 10:03:05.959741,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/trans2.c(8361) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
[2013/01/21 10:03:05.962326,  3] smbd/process.c:1662(process_smb)
  Transaction 3 of length 186 (0 toread)
[2013/01/21 10:03:05.962398,  3] smbd/process.c:1467(switch_message)
  switch message SMBsesssetupX (pid 7864494) conn 0x0
[2013/01/21 10:03:05.962483,  3] smbd/sesssetup.c:1333(reply_sesssetup_and_X)
  wct=13 flg2=0xc807
[2013/01/21 10:03:05.962545,  3] smbd/sesssetup.c:1536(reply_sesssetup_and_X)
  Domain=[10.33.72.67]  NativeOS=[] NativeLanMan=[] PrimaryDomain=[null]
[2013/01/21 10:03:05.962614,  3] smbd/sesssetup.c:1552(reply_sesssetup_and_X)
  sesssetupX:name=[10.33.72.67]\[benhu]@[10.33.75.164]
[2013/01/21 10:03:05.962719,  3] smbd/sesssetup.c:151(check_guest_password)
  Got anonymous request
[2013/01/21 10:03:05.962780,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2013/01/21 10:03:05.962848,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: []\[]@[]
[2013/01/21 10:03:05.962940,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: guest authentication for user [] succeeded
[2013/01/21 10:03:05.963071,  3] smbd/process.c:1467(switch_message)
  switch message SMBtconX (pid 7864494) conn 0x0
[2013/01/21 10:03:05.963157,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.33.75.164 (10.33.75.164)
[2013/01/21 10:03:05.967502,  3] auth/token_util.c:438(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.967656,  3] auth/token_util.c:469(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.968310,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[WORKGROUP]\[benhu]@[10.33.75.164] with the new password interface
[2013/01/21 10:03:05.968379,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: [SYSTST]\[benhu]@[10.33.75.164]
[2013/01/21 10:03:05.976557,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for benhu
[2013/01/21 10:03:05.977926,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: unix authentication for user [benhu] succeeded
[2013/01/21 10:03:05.978017,  2] auth/auth.c:309(check_ntlm_password)
  check_ntlm_password:  authentication for user [benhu] -> [benhu] ->
[benhu] succeeded
[2013/01/21 10:03:05.978134,  3] smbd/password.c:651(authorise_login)
  authorise_login: ACCEPTED: session list username (benhu) and given password ok
[2013/01/21 10:03:05.981886,  3] auth/token_util.c:438(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.982053,  3] auth/token_util.c:469(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.983692,  3] passdb/lookup_sid.c:1754(get_primary_group_sid)
  Forcing Primary Group to 'Domain Users' for benhu
[2013/01/21 10:03:05.987681,  3] auth/token_util.c:438(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.987854,  3] auth/token_util.c:469(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 10:03:05.989120,  3] smbd/service.c:872(make_connection_snum)
  Connect path is '/testshare' for service [testshare]
[2013/01/21 10:03:05.989216,  3] smbd/vfs.c:102(vfs_init_default)
  Initialising default vfs hooks
[2013/01/21 10:03:05.989276,  3] smbd/vfs.c:128(vfs_init_custom)
  Initialising custom vfs hooks from [/[Default VFS]/]
[2013/01/21 10:03:05.989456,  3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
  string_to_sid: SID +titan is not in a valid format
[2013/01/21 10:03:05.991388,  1] smbd/service.c:1114(make_connection_snum)
  10.33.75.164 (10.33.75.164) connect to service testshare initially as user
benhu (uid=1565, gid=209) (pid 7864494)
[2013/01/21 10:03:05.991490,  3] smbd/reply.c:871(reply_tcon_and_X)
  tconX service=TESTSHARE
[2013/01/21 10:03:06.032066,  3] smbd/process.c:1662(process_smb)
  Transaction 4 of length 80 (0 toread)
[2013/01/21 10:03:06.032151,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.032236,  3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
  string_to_sid: SID +titan is not in a valid format
[2013/01/21 10:03:06.034067,  3] smbd/trans2.c:5132(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2013/01/21 10:03:06.034151,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [.] [/testshare]
[2013/01/21 10:03:06.034298,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: . reduced to /testshare
[2013/01/21 10:03:06.034441,  3] smbd/trans2.c:5276(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2013/01/21 10:03:06.034988,  3] smbd/process.c:1662(process_smb)
  Transaction 5 of length 80 (0 toread)
[2013/01/21 10:03:06.035067,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.035145,  3] smbd/trans2.c:5132(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2013/01/21 10:03:06.035238,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [.] [/testshare]
[2013/01/21 10:03:06.035361,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: . reduced to /testshare
[2013/01/21 10:03:06.035464,  3] smbd/trans2.c:5276(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0
[2013/01/21 10:03:06.093940,  3] smbd/process.c:1662(process_smb)
  Transaction 6 of length 92 (0 toread)
[2013/01/21 10:03:06.094021,  3] smbd/process.c:1467(switch_message)
  switch message SMBntcreateX (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.094107,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [.] [/testshare]
[2013/01/21 10:03:06.094230,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: . reduced to /testshare
[2013/01/21 10:03:06.095384,  3] smbd/process.c:1662(process_smb)
  Transaction 7 of length 88 (0 toread)
[2013/01/21 10:03:06.095465,  3] smbd/process.c:1467(switch_message)
  switch message SMBnttrans (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.095546,  3]
smbd/nttrans.c:1745(call_nt_transact_notify_change)
  call_nt_transact_notify_change
[2013/01/21 10:03:06.095614,  3]
smbd/nttrans.c:1762(call_nt_transact_notify_change)
  call_nt_transact_notify_change: notify change called on ., filter =
FILE_NAME|DIR_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
[2013/01/21 10:03:06.109695,  3] smbd/process.c:1662(process_smb)
  Transaction 8 of length 114 (0 toread)
[2013/01/21 10:03:06.109766,  3] smbd/process.c:1467(switch_message)
  switch message SMBntcreateX (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.109883,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [desktop.ini] [/testshare]
[2013/01/21 10:03:06.110011,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: desktop.ini reduced to /testshare/desktop.ini
[2013/01/21 10:03:06.110095,  3] smbd/dosmode.c:159(unix_mode)
  unix_mode(desktop.ini) returning 0744
[2013/01/21 10:03:06.110166,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/error.c(161) cmd=162 (SMBntcreateX)
NT_STATUS_OBJECT_NAME_NOT_FOUND
[2013/01/21 10:03:06.110960,  3] smbd/process.c:1662(process_smb)
  Transaction 9 of length 92 (0 toread)
[2013/01/21 10:03:06.111030,  3] smbd/process.c:1467(switch_message)
  switch message SMBntcreateX (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.111105,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [.] [/testshare]
[2013/01/21 10:03:06.111218,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: . reduced to /testshare
[2013/01/21 10:03:06.111310,  3] smbd/dosmode.c:159(unix_mode)
  unix_mode(.) returning 0744
[2013/01/21 10:03:06.112283,  3] smbd/process.c:1662(process_smb)
  Transaction 10 of length 90 (0 toread)
[2013/01/21 10:03:06.112354,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.112441,  3] smbd/trans2.c:2286(call_trans2findfirst)
  call_trans2findfirst: dirtype = 16, maxentries = 1366, close_after_first=0,
close_if_end = 1 requires_resume_key = 1 level = 0x104, max_data_bytes = 16384
[2013/01/21 10:03:06.112539,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [*] [/testshare]
[2013/01/21 10:03:06.112692,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: * reduced to /testshare/*
[2013/01/21 10:03:06.112758,  3] smbd/vfs.c:905(check_reduced_name)
  check_reduced_name [.] [/testshare]
[2013/01/21 10:03:06.112869,  3] smbd/vfs.c:1039(check_reduced_name)
  check_reduced_name: . reduced to /testshare
[2013/01/21 10:03:06.112947,  3] smbd/dir.c:578(dptr_create)
  creating new dirptr 256 for path ., expect_close = 1
[2013/01/21 10:03:06.113060,  3] smbd/dir.c:1041(smbd_dirptr_get_entry)
  smbd_dirptr_get_entry mask=[*] found ./. fname=. (.)
[2013/01/21 10:03:06.113152,  3] smbd/dir.c:1041(smbd_dirptr_get_entry)
  smbd_dirptr_get_entry mask=[*] found ./.. fname=.. (..)
[2013/01/21 10:03:06.113256,  3] smbd/dir.c:1041(smbd_dirptr_get_entry)
  smbd_dirptr_get_entry mask=[*] found ./test.txt.txt fname=test.txt.txt
(test.txt.txt)
[2013/01/21 10:03:06.143574,  3] smbd/process.c:1662(process_smb)
  Transaction 11 of length 45 (0 toread)
[2013/01/21 10:03:06.143648,  3] smbd/process.c:1467(switch_message)
  switch message SMBclose (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.143723,  3] smbd/reply.c:4838(reply_close)
  close directory fnum=4727
[2013/01/21 10:03:06.150454,  3] smbd/process.c:1662(process_smb)
  Transaction 12 of length 74 (0 toread)
[2013/01/21 10:03:06.150526,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.150600,  3] smbd/trans2.c:3507(call_trans2qfsinfo)
  call_trans2qfsinfo: level = 258
[2013/01/21 10:03:06.150664,  3] smbd/trans2.c:2945(smbd_do_qfsinfo)
  smbd_do_qfsinfo: level = 258
[2013/01/21 10:03:06.153361,  3] smbd/process.c:1662(process_smb)
  Transaction 13 of length 74 (0 toread)
[2013/01/21 10:03:06.153434,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.153507,  3] smbd/trans2.c:3507(call_trans2qfsinfo)
  call_trans2qfsinfo: level = 261
[2013/01/21 10:03:06.153569,  3] smbd/trans2.c:2945(smbd_do_qfsinfo)
  smbd_do_qfsinfo: level = 261
[2013/01/21 10:03:06.157939,  3] smbd/process.c:1662(process_smb)
  Transaction 14 of length 120 (0 toread)
[2013/01/21 10:03:06.158011,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x1100e4e80
[2013/01/21 10:03:06.158149,  3] smbd/msdfs.c:891(get_referred_path)
  get_referred_path: |testshare| in dfs path \10.33.72.67\testshare is not a dfs
root.
[2013/01/21 10:03:06.158216,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/trans2.c(8361) cmd=50 (SMBtrans2) NT_STATUS_NOT_FOUND
[2013/01/21 10:03:06.370869,  3] smbd/process.c:1662(process_smb)
  Transaction 15 of length 76 (0 toread)
[2013/01/21 10:03:06.370947,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x1100e4e80
[2013/01/21 10:03:06.371024,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/trans2.c(4163) cmd=50 (SMBtrans2)
NT_STATUS_INVALID_HANDLE
[2013/01/21 10:03:06.372007,  3] smbd/process.c:1662(process_smb)
  Transaction 16 of length 76 (0 toread)
[2013/01/21 10:03:06.372078,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x1100e4e80
[2013/01/21 10:03:06.372157,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/trans2.c(4163) cmd=50 (SMBtrans2)
NT_STATUS_INVALID_HANDLE
[2013/01/21 10:03:06.373679,  3] smbd/process.c:1662(process_smb)
  Transaction 17 of length 104 (0 toread)
[2013/01/21 10:03:06.373751,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans (pid 7864494) conn 0x1100e4e80
[2013/01/21 10:03:06.373827,  3] smbd/ipc.c:560(handle_trans)
  trans <\PIPE\MsFteWds> data=0 params=0 setup=2
[2013/01/21 10:03:06.373904,  3] smbd/ipc.c:511(named_pipe)
  named pipe command on <MsFteWds> name
[2013/01/21 10:03:06.373960,  3] smbd/ipc.c:546(named_pipe)
  unknown named pipe: setup 0x53 setup1=0
[2013/01/21 10:03:06.374019,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/ipc.c(548) cmd=37 (SMBtrans) NT_STATUS_NOT_SUPPORTED
[2013/01/21 10:03:06.592788,  3] smbd/process.c:1662(process_smb)
  Transaction 18 of length 74 (0 toread)
[2013/01/21 10:03:06.592863,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.592942,  3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
  string_to_sid: SID +titan is not in a valid format
[2013/01/21 10:03:06.594859,  3] smbd/trans2.c:3507(call_trans2qfsinfo)
  call_trans2qfsinfo: level = 1007
[2013/01/21 10:03:06.594927,  3] smbd/trans2.c:2945(smbd_do_qfsinfo)
  smbd_do_qfsinfo: level = 1007
[2013/01/21 10:03:06.600923,  3] smbd/process.c:1662(process_smb)
  Transaction 19 of length 74 (0 toread)
[2013/01/21 10:03:06.600998,  3] smbd/process.c:1467(switch_message)
  switch message SMBtrans2 (pid 7864494) conn 0x110141960
[2013/01/21 10:03:06.601072,  3] smbd/trans2.c:3507(call_trans2qfsinfo)
  call_trans2qfsinfo: level = 1007
[2013/01/21 10:03:06.601155,  3] smbd/trans2.c:2945(smbd_do_qfsinfo)
  smbd_do_qfsinfo: level = 1007



The part that really stands out to me is:

[2013/01/21 09:48:54.517801,  3]
../libcli/security/dom_sid.c:208(dom_sid_parse_endp)
  string_to_sid: SID +titan is not in a valid format


Why isn't it honoring group membership?  


If I remove the username, and just leave '+titan', here's the log
output when I connect, and it fails to mount:

[2013/01/21 09:53:26.955993,  3] param/loadparm.c:9572(lp_load_ex)
  lp_load_ex: refreshing parameters
[2013/01/21 09:53:26.956152,  3] param/loadparm.c:5192(init_globals)
  Initialising global parameters
[2013/01/21 09:53:26.956493,  3] ../lib/util/params.c:550(pm_process)
  params.c:pm_process() - Processing configuration file
"/etc/samba-3.6.10/smb.conf"
[2013/01/21 09:53:26.956592,  3] param/loadparm.c:8310(do_section)
  Processing section "[global]"
[2013/01/21 09:53:26.957512,  2] param/loadparm.c:8327(do_section)
  Processing section "[testshare]"
[2013/01/21 09:53:26.957744,  3] param/loadparm.c:6630(lp_add_ipc)
  adding IPC service
[2013/01/21 09:53:26.957809,  1] param/loadparm.c:9670(lp_load_ex)
  WARNING: The security=share option is deprecated
[2013/01/21 09:53:26.958227,  2] lib/interface.c:479(interpret_interface)
  interpret_interface: Adding interface 10.33.72.67/22
[2013/01/21 09:53:26.958297,  2] lib/interface.c:341(add_interface)
  added interface 10.33.72.67/22 ip=10.33.72.67 bcast=10.33.75.255
netmask=255.255.252.0
[2013/01/21 09:53:26.958389,  2] lib/interface.c:341(add_interface)
  added interface lo0 ip=127.0.0.1 bcast=127.242.234.223 netmask[2013/01/21
09:53:26.958520,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.33.75.164 (10.33.75.164)
[2013/01/21 09:53:26.958610,  3] smbd/oplock.c:922(init_oplocks)
  init_oplocks: initializing messages.
[2013/01/21 09:53:26.958798,  3] smbd/process.c:1662(process_smb)
  Transaction 0 of length 159 (0 toread)
[2013/01/21 09:53:26.958881,  3] smbd/process.c:1467(switch_message)
  switch message SMBnegprot (pid 13041834) conn 0x0
[2013/01/21 09:53:26.959025,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2013/01/21 09:53:26.959104,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LANMAN1.0]
[2013/01/21 09:53:26.959171,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [Windows for Workgroups 3.1a]
[2013/01/21 09:53:26.959239,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LM1.2X002]
[2013/01/21 09:53:26.959325,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [LANMAN2.1]
[2013/01/21 09:53:26.959392,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [NT LM 0.12]
[2013/01/21 09:53:26.959458,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [SMB 2.002]
[2013/01/21 09:53:26.959524,  3] smbd/negprot.c:598(reply_negprot)
  Requested protocol [SMB 2.???]
[2013/01/21 09:53:26.959700,  3] smbd/negprot.c:401(reply_nt1)
  not using SPNEGO
[2013/01/21 09:53:26.959762,  3] smbd/negprot.c:704(reply_negprot)
  Selected protocol NT LM 0.12
[2013/01/21 09:53:26.961380,  3] smbd/process.c:1662(process_smb)
  Transaction 1 of length 186 (0 toread)
[2013/01/21 09:53:26.961462,  3] smbd/process.c:1467(switch_message)
  switch message SMBsesssetupX (pid 13041834) conn 0x0
[2013/01/21 09:53:26.961553,  3] smbd/sesssetup.c:1333(reply_sesssetup_and_X)
  wct=13 flg2=0xc807
[2013/01/21 09:53:26.961643,  3] smbd/sesssetup.c:1536(reply_sesssetup_and_X)
  Domain=[10.33.72.67]  NativeOS=[] NativeLanMan=[] PrimaryDomain=[null]
[2013/01/21 09:53:26.961727,  2] smbd/sesssetup.c:1279(setup_new_vc_session)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2013/01/21 09:53:26.961788,  3] smbd/sesssetup.c:1552(reply_sesssetup_and_X)
  sesssetupX:name=[10.33.72.67]\[benhu]@[10.33.75.164]
[2013/01/21 09:53:26.962499,  3] smbd/sesssetup.c:151(check_guest_password)
  Got anonymous request
[2013/01/21 09:53:26.962599,  3] auth/auth.c:219(check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2013/01/21 09:53:26.962671,  3] auth/auth.c:222(check_ntlm_password)
  check_ntlm_password:  mapped user is: []\[]@[]
[2013/01/21 09:53:26.962761,  3] auth/auth.c:268(check_ntlm_password)
  check_ntlm_password: guest authentication for user [] succeeded
[2013/01/21 09:53:26.962842,  3] smbd/process.c:1467(switch_message)
  switch message SMBtconX (pid 13041834) conn 0x0
[2013/01/21 09:53:26.962939,  3] lib/access.c:338(allow_access)
  Allowed connection from 10.33.75.164 (10.33.75.164)
[2013/01/21 09:53:26.970553,  3] auth/token_util.c:438(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 09:53:26.970713,  3] auth/token_util.c:469(finalize_local_nt_token)
  Failed to fetch domain sid for WORKGROUP
[2013/01/21 09:53:26.971217,  2]
smbd/service.c:655(create_connection_session_info)
  Invalid username/password for [testshare]
[2013/01/21 09:53:26.971278,  1] smbd/service.c:805(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_WRONG_PASSWORD
[2013/01/21 09:53:26.971359,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/reply.c(803) cmd=117 (SMBtconX) NT_STATUS_WRONG_PASSWORD



I really need it to be able to secure shares by local OS groups.  This worked on
our older version of Samba 3.0
Many thanks in advance...

-Ben

Chris Smith

2013-Jan-21 21:19 UTC

head link

[Samba] Samba 3.6.10 not reading groups

Might be related to my bug:
https://bugzilla.samba.org/show_bug.cgi?id=9561

Unfortunately I'm not getting any traction on it. From my testing
there still hasn't, after 10 releases, been a fully usable 3.6.x and
now it's claimed to be in "maintenance mode" due to the release of
Samba 4.x, which I guess must not have any major issues.

On Mon, Jan 21, 2013 at 1:06 PM, Benjamin Huntsman
<BHuntsman at mail2.cu-portland.edu> wrote:> It isn't honoring groups specified in the valid users clause of the
share configuration.
> I'm running in security = SHARE mode, and user authentication is
working just fine.  Even if I specify individual users on the valid users =
line, it works.  Just not groups.

Seemingly Similar Threads

Search for more apparently analagous threads

samba - Jan 2013 - Samba 3.6.10 not reading groups

[Samba] Samba 3.6.10 not reading groups

[Samba] Samba 3.6.10 not reading groups

Seemingly Similar Threads