Bug 7660 - valid users options
Summary: valid users options
Status: NEW
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: User & Group Accounts (show other bugs)
Version: 3.2.8
Hardware: Sparc Solaris
: P3 normal
Target Milestone: ---
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-09-03 08:24 UTC by Pierre DUPEYRAT
Modified: 2010-09-07 02:18 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Pierre DUPEYRAT 2010-09-03 08:24:17 UTC 
I am using samba server as members of windows AD domain , with “security = ADS”, the logins unix and windows are aligned.
Servers are in Solaris 8 & 10
Since the version 3.0.34, 3.2.8 ,3.4.6 , I have strange behaviour  on shares where i use “valid users” with NIS unix groups it does’nt work, it was working fine in 3.0.30.

Nok:
Valid users = @group1
Valid users = +group1  

Still work :
Valid users = Domain\user 
Valid users = user

The bad workaround found , is to use a file users.map and add the entry below:
user = domaine\user
The samba behavior is like if samba was unable to identify the unix groups of a user without an entry in the users.map file.


could you help me ?
Regards.
Comment 1 Pierre DUPEYRAT 2010-09-06 09:41:13 UTC 
# /etc/nsswitch.nis:
passwd:    files nis
group:     files nis
Comment 2 Pierre DUPEYRAT 2010-09-06 11:42:18 UTC 
When i kill winbind process , it works fine :-((
Comment 3 Pierre DUPEYRAT 2010-09-07 02:18:13 UTC 
I should'nt use winbind to access but i can see logs below :

Failed to create BUILTIN\Users group! Can Winbind allocate gids?