Bug 7660 – valid users options

Bug 7660 - valid users options


Summary:	valid users options

Status:	NEW

Product:	Samba 3.2
Classification:	Unclassified
Component:	User & Group Accounts
Version:	3.2.8
Hardware:	Sparc Solaris

Importance:	P3 normal
Target Milestone:	---
Assigned To:	Samba Bugzilla Account
QA Contact:	Samba QA Contact

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2010-09-03 08:24 UTC by Pierre DUPEYRAT
Modified:	2010-09-07 02:18 UTC (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Pierre DUPEYRAT 2010-09-03 08:24:17 UTC

I am using samba server as members of windows AD domain , with “security = ADS”, the logins unix and windows are aligned.
Servers are in Solaris 8 & 10
Since the version 3.0.34, 3.2.8 ,3.4.6 , I have strange behaviour  on shares where i use “valid users” with NIS unix groups it does’nt work, it was working fine in 3.0.30.

Nok:
Valid users = @group1
Valid users = +group1  

Still work :
Valid users = Domain\user 
Valid users = user

The bad workaround found , is to use a file users.map and add the entry below:
user = domaine\user
The samba behavior is like if samba was unable to identify the unix groups of a user without an entry in the users.map file.


could you help me ?
Regards.

Comment 1 Pierre DUPEYRAT 2010-09-06 09:41:13 UTC

# /etc/nsswitch.nis:
passwd:    files nis
group:     files nis

Comment 2 Pierre DUPEYRAT 2010-09-06 11:42:18 UTC

When i kill winbind process , it works fine :-((

Comment 3 Pierre DUPEYRAT 2010-09-07 02:18:13 UTC

I should'nt use winbind to access but i can see logs below :

Failed to create BUILTIN\Users group! Can Winbind allocate gids?