search for: parse_domain_user

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Volker, Assume I have a member server named LINUX joined to a domain name AD. Now assume I have a local user named foo in my passdb and a user named foo in the domain as well. I'm modifying winbindd_util.c:parse_domain_user() to do a lookup_name() to try to figure out which domain to prepend to the username rather than just assuming its a domain user. But this means that we'll always choose the local user (due to the order of an isolated search in lookup_name()). The main problem is the use default domain abomina...

...hange() pdb_getsampwnam() smbpasswd_getsampwnam() build_sam_account() Get_Pwnam_alloc() Get_Pwnam_internals() <-- turn "ZTEST" to "ztest" getpwnam_alloc_cached() getpwnam() (nss_winbinadd) winbindd_getpwnam_send() parse_domain_user() <-- add "UUQ" to domain and namespace. assume_domain() When samba role is DC , "winbind use default domain" does not work in assume_domain(). Then getpwnam() get domain user. I have checked the following list and commit https://lists.samba.org/archive/samba-te...

...etsampwnam() > build_sam_account() > Get_Pwnam_alloc() > Get_Pwnam_internals() <-- turn "ZTEST" to "ztest" > getpwnam_alloc_cached() > getpwnam() > (nss_winbinadd) > winbindd_getpwnam_send() > parse_domain_user() <-- add "UUQ" to domain and namespace. > assume_domain() > > When samba role is DC , "winbind use default domain" does not work in > assume_domain(). Then getpwnam() get domain user. > > I have checked the following list and commit > https...

...ount() > > Get_Pwnam_alloc() > > Get_Pwnam_internals() <-- turn "ZTEST" to "ztest" > > getpwnam_alloc_cached() > > getpwnam() > > (nss_winbinadd) > > winbindd_getpwnam_send() > > parse_domain_user() <-- add "UUQ" to domain and namespace. > > assume_domain() > > > > When samba role is DC , "winbind use default domain" does not work in > > assume_domain(). Then getpwnam() get domain user. > > > > I have checked the followin...

...! The problem lies in the "winbind separator" settings. If I use winbind separator = \\ everything goes well. I believe this is due to a bug. As I don't want to register to yet another bugzilla, please someone issue the report there. Explanation: winbindd_raw_kerberos_login uses parse_domain_user to generate the kerberos principal from state->request.data.auth.user at this point state->request.data.auth.user is in form 'DOMAIN\username', regardless the winbind separator setting. parse_domain_user uses winbind separator setting to parse this, so it will fail if the separator is...

...;return false;": 1. replace the patched line with this one: fstrcpy(domain, namespace); so in our setup domain would be set to namespace which is is set to 2. don't use the patch added via Bug 13503 at all So for me it looks the issue is caused somehwere later in code, when function parse_domain_user sets namespace to something different than domain - in our case namespace=lp_netbios_name()='HOSTNAME' and domain=''. If i would be asked, i would go with solution 1 (patch file attached) to keep fix for Bug 13503 and assume not breaking it - maybe Mr. Schneider could take a look...

...m_alloc() > > > Get_Pwnam_internals() <-- turn "ZTEST" to "ztest" > > > getpwnam_alloc_cached() > > > getpwnam() > > > (nss_winbinadd) > > > winbindd_getpwnam_send() > > > parse_domain_user() <-- add "UUQ" to domain and > > > namespace. assume_domain() > > > > > > When samba role is DC , "winbind use default domain" does not > > > work in assume_domain(). Then getpwnam() get domain user. > > > > > > I have ch...

...-----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Volker, > > Assume I have a member server named LINUX joined to a > domain name AD. Now assume I have a local user named foo > in my passdb and a user named foo in the domain as well. > I'm modifying winbindd_util.c:parse_domain_user() to do > a lookup_name() to try to figure out which domain to prepend > to the username rather than just assuming its a domain user. > But this means that we'll always choose the local user > (due to the order of an isolated search in lookup_name()). > > The main problem is...

On Fri, 22 Feb 2019 16:40:46 +0100 Alexander Spannagel via samba <samba at lists.samba.org> wrote: > Am 22.02.19 um 15:42 schrieb Rowland Penny via samba: > > On Fri, 22 Feb 2019 15:35:53 +0100 > > Ralph Böhme via samba <samba at lists.samba.org> wrote: > > > >> Hi, > >> > >> On Fri, Feb 22, 2019 at 01:59:15PM +0100, Alexander Spannagel

...ce the patched line with this one: > fstrcpy(domain, namespace); > so in our setup domain would be set to namespace which is is set > to 2. don't use the patch added via Bug 13503 at all > > So for me it looks the issue is caused somehwere later in code, when > function parse_domain_user sets namespace to something different than > domain - in our case namespace=lp_netbios_name()='HOSTNAME' and > domain=''. If i would be asked, i would go with solution 1 (patch > file attached) to keep fix for Bug 13503 and assume not breaking it - > maybe Mr. Schneider...

...in; TALLOC_CTX *mem_ctx; /* Ensure null termination */ state->request.data.username[sizeof(state->request.data.username)-1]='\0'; DEBUG(3, ("[%5lu]: getpwnam %s\n", (unsigned long)state->pid, state->request.data.username)); /* Parse domain and username */ parse_domain_user(state->request.data.username, name_domain, name_user); /* if this is our local domain (or no domain), the do a local tdb search */ if ( !*name_domain || strequal(name_domain, get_global_sam_name()) ) { if ( !(pw = wb_getpwnam(name_user)) ) { DEBUG(5,("winbindd_getpwnam: lookup fo...

...equence number for PANASAS of 1770 [2001/06/08 14:41:30, 0] nsswitch/winbindd_user.c:winbindd_getpwnam_from_user(136) @@@EPHI 3 OK [2001/06/08 14:41:30, 3] nsswitch/winbindd_user.c:winbindd_getpwnam_from_user(104) [26720]: getpwnam panasas+edror [2001/06/08 14:41:30, 0] nsswitch/winbindd_util.c:parse_domain_user(908) @@@EPHI In parse_domain_user domuser is panasas+edror, sep is + [2001/06/08 14:41:30, 3] nsswitch/winbindd_cache.c:get_cache_sequence_number(112) CACHESEQ PANASAS/USR/edror is 1770 [2001/06/08 14:41:30, 3] nsswitch/winbindd_cache.c:cached_sequence_number(68) cached sequence number for P...

...e to strip the domain\ prefix, allowing local logins with pam etc to avoid typing the domain. Specifically, in source3/winbindd/winbindd_util.c:assume_domain() in It changes the domain member to act more like an old-style DC. The impact of this is deliberatly on fill_domain_username_talloc() and parse_domain_user(). (There are a few other references, essentially to mirror this in smbd). > Remove the line, this should stop it happening again > > If you have only one domain, then you shouldn't be using autorid, > you > should be using rid instead, unfortunately it is probably too late...

...Get_Pwnam_internals() <-- turn "ZTEST" to "ztest" > > > > getpwnam_alloc_cached() > > > > getpwnam() > > > > (nss_winbinadd) > > > > winbindd_getpwnam_send() > > > > parse_domain_user() <-- add "UUQ" to domain and > > > > namespace. assume_domain() > > > > > > > > When samba role is DC , "winbind use default domain" does not > > > > work in assume_domain(). Then getpwnam() get domain user. > > > >...

...-i unknown winbind use default domain = Yes failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user unknown real 0m0.015s user 0m0.005s sys 0m0.005s Doing some code research i could track it down to a logical change and the return value of the function parse_domain_user from within source3/winbindd/winbindd_util.c. Calling the function with this conditions: - none domain (e.g. empty) - user without a domain part (e.g. not DOM\user or user at DOM) - "winbind use default domain" set to No/false (which is the default) causes different return values: - up...

...e a result wins and as sssd & winbind do the same thing, you don't need both. > The only interaction i could imagine if one of the libs in the stack > calls the stack from beginning waiting for a certain answer ending up > in a dead end. > Following the functions calls of the parse_domain_user function it > seems to me samba takes care about this with the flag > LOOKUP_NAME_NO_NSS in the code - only an assumption as programming is > not my daily business. > > > >> > >> The proof of the pudding is of course, Alexander removing sssd from > >> nss...

...can be taken into the stack. Before nss_sss we used nss_ldap alongside with nss_winbind without issues. The only interaction i could imagine if one of the libs in the stack calls the stack from beginning waiting for a certain answer ending up in a dead end. Following the functions calls of the parse_domain_user function it seems to me samba takes care about this with the flag LOOKUP_NAME_NO_NSS in the code - only an assumption as programming is not my daily business. >> >> The proof of the pudding is of course, Alexander removing sssd from >> nsswitch.conf and show us the problem sti...

Hi The server suddenly changed the uid + gid. this happened to times, yesterday and the week after. The default group at example The samba is a AD member where we have many users (>20 000) and we use autorid in that way [global] security = ads workgroup = CUSTOMER realm = CUSTOMER.COM winbind use default domain = yes winbind enum users = yes winbind enum group = yes

> On 23 Feb 2019, at 14:52, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Sat, 23 Feb 2019 14:21:57 +0100 > Remy Zandwijk via samba <samba at lists.samba.org> wrote: > >> >> >>> On 23 Feb 2019, at 14:07, Rowland Penny via samba >>> <samba at lists.samba.org> wrote: >>> >>> On Sat, 23 Feb 2019

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 dragen@pbsi.org ?rta: | I am hacing trouble. I can see my linux box from my windows box, I can connect | and browse but I cant delete or modify files. Do I have something wrong? | | The is my smb.conf | | [global] | netbios name = dragenlinux | server string = "DragenLinux" | workgroup = WORKGROUP | security = share | log file =