[Pkg-samba-maint] Bug#424046: samba: remote authenticating fail with 3.0.25

[Vladimir Stavrinov]

On Wed, May 16, 2007 at 06:40:10AM +0200, Christian Perrier wrote:

> Braindead blacklists used by your ISP or company (blocks all address
> blocks from others ISP on the stupid assumption that nobody should run
> a mail server at home). Makes communication harder.
> 
> ----- Forwarded message from Mail Delivery System <MAILER-DAEMON at kheops.perrier.eu.org> -----
> 
> Date: Tue, 15 May 2007 20:29:01 +0200 (CEST)
> From: Mail Delivery System <MAILER-DAEMON at kheops.perrier.eu.org>
> Subject: Undelivered Mail Returned to Sender
> To: bubulle at kheops.frmug.org
> X-CRM114-Status: Good  ( pR: 999.99  )
> 
> Content-Description: Notification
> This is the mail system at host kheops.perrier.eu.org.
> 
> I'm sorry to have to inform you that your message could not
> be delivered to one or more recipients. It's attached below.
> 
> For further assistance, please send mail to postmaster.
> 
> If you do so, please include this problem report. You can
> delete your own text from the attached returned message.
> 
>                    The mail system
> 
> <vs at inist.ru>: host relay.rinet.ru[195.54.192.35] said: 553 5.3.0
>     <vs at inist.ru>... Rejected - use your ISP mail server (in reply to RCPT TO
>     command)
> 
> Content-Description: Delivery report
> Reporting-MTA: dns; kheops.perrier.eu.org
> X-Postfix-Queue-ID: EF88B4F9CD
> X-Postfix-Sender: rfc822; bubulle at kheops.frmug.org
> Arrival-Date: Tue, 15 May 2007 20:28:03 +0200 (CEST)
> 
> Final-Recipient: rfc822; vs at inist.ru
> Original-Recipient: rfc822;vs at inist.ru
> Action: failed
> Status: 5.3.0
> Remote-MTA: dns; relay.rinet.ru
> Diagnostic-Code: smtp; 553 5.3.0 <vs at inist.ru>... Rejected - use your ISP mail
>     server
> 
> Content-Description: Undelivered Message
> Date: Tue, 15 May 2007 19:09:44 +0200
> From: Christian Perrier <bubulle at debian.org>
> To: Vladimir Stavrinov <vs at inist.ru>, 424046 at bugs.debian.org
> Subject: Re: Bug#424046: samba: remote authenticating fail with 3.0.25
> Reply-To: 424046 at bugs.debian.org
> 
> Quoting Vladimir Stavrinov (vs at inist.ru):
> > Package: samba
> > Version: 3.0.24-6
> > Severity: normal
> > 
> > 
> > After upgrade from 3.0.24 to 3.0.25 the users can't get write access to their
> > shares. The settings in the smb.conf are:
> > 
> > security = server
> > username map = /etc/samba/smbusers
> > 
> > I try to enter password of local user the domain users mapped to and get access
> > successfully. This look like users are authorized locally instead of by domain
> > controller.
> 
> 
> While what you report should still be considered as a bug, could you
> try with "security=domain".
> 
> "security=server" is, IIRC, mostly considered as a hack by the Samba
> Team so it might be a good occasion for you to switch to soemthing
> better supported....and tested..:-)
> 
> Of course, if this bug is reproducible in "security=domain", it would
> be time to upgrade the bug severity....
> 
> 
> 
> 
> 
> 
> ----- End forwarded message -----
> 
> 

Yes, I have tried "security = domain" on other machine and join
it to domain. The behavior differ, but still can't get write
access. samba reported something like "no such user" and give
the guest access instead of the real user.

By the way, I saw the same report in the samba mailing list:

http://lists.samba.org/archive/samba/2007-May/131939.html


-- 

*****************************
****  Vladimir Stavrinov  ***
*******  vs at inist.ru  *******
*****************************