Bug 6207 - Hyphen problem with group names
Summary: Hyphen problem with group names
Status: NEW
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 3.2.5
Hardware: x86 Linux
: P3 normal
Target Milestone: ---
Assignee: Michael Adam
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-03-23 09:56 UTC by Guido Kriebel
Modified: 2009-08-06 19:19 UTC (History)
0 users

See Also:


Attachments
Debug 10 Log of Winbind (8.70 KB, text/plain)
2009-03-23 09:57 UTC, Guido Kriebel
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Guido Kriebel 2009-03-23 09:56:46 UTC
* All Domain Group can show with "getent group" with out any problems, but group with german umlauts don't show (example Domänen-Admins).
* With wbinfo i habe no trouble with german umlauts.
* locale is configured with iso-8859-15
* ssh session works with iso-8859-15
* smb.conf charset is configured: DOS=850, Unix=iso-8859-15, Display=iso-8859-15
* I have the same error with UTF8


I have added a Log File with Debug 10

Thanks
Comment 1 Guido Kriebel 2009-03-23 09:57:15 UTC
Created attachment 4007 [details]
Debug 10 Log of Winbind
Comment 2 Guido Kriebel 2009-03-24 10:03:04 UTC
I have found the bug!
The problem is not only by group names with german umlauts!

We use as domain seperator the character "-".
All groups with a "-" in the group name (not group comment) don't work with getent group, setfacl or getfacl (nsswitch).

* If i replace the "-" with a "_", it works.
* If i set the domain seperator to "+", it works.

Guido Kriebel
Comment 3 Volker Lendecke 2009-03-24 10:19:42 UTC
so the umlaut groups without - work? Or don't they work?

Volker
Comment 4 Guido Kriebel 2009-03-24 10:30:27 UTC
I only thought it would be the german umlauts, but that was not the problem!

The Problem is on all groups with a hyphen (-).
If the domain seperator is a "+" all groups work, even those with German umlauts.

NOT WORKING:
------------
smb.conf:
winbind separator = -

example:
getent group DOMAIN-Domänen-Admins --> shows nothing
getent group DOMAIN-IT-Consult --> shows nothing
getent group DOMAIN-IT --> shows gid and group users

WORKING:
------------
smb.conf:
winbind separator = +

command:
getent group DOMAIN-Domänen-Admins --> shows gid and group users
getent group DOMAIN-IT-Consult --> shows gid and group users
getent group DOMAIN-IT --> shows gid and group users

Guido

(In reply to comment #3)
> so the umlaut groups without - work? Or don't they work?
> 
> Volker
> 

Comment 5 Guido Kriebel 2009-03-24 10:35:50 UTC
Sorry - a little failure in my comment. Here the corrected version.
WORKING:
------------
smb.conf:
winbind separator = +
 
command:
getent group DOMAIN+Domänen-Admins --> shows gid and group users
getent group DOMAIN+IT-Consult --> shows gid and group users
getent group DOMAIN+IT --> shows gid and group users
Comment 6 Guenther Deschner 2009-08-06 19:19:42 UTC
Guido, renaming summary as of your analysis.