[Pkg-samba-maint] Bug#536365: Bug#536365: Bug#536365: Bug#536365: samba: domain member don't authorize domain users

[Christian Perrier]

Quoting Vladimir Stavrinov (vs at inist.ru):
> On Fri, Jul 10, 2009 at 06:43:47AM +0200, Christian Perrier wrote:
> 
> > Please take care to isolate the place where the problem clearly
> > appears, as much as you can. If the file is big, then gzip it, but
> > don't worry.
> 
> Here is test scenario:
> 
> 1. Fresh install samba onto machine hog for test purpose only.
> 2. Modify smb.conf and join domain inistdom.
> 3. Stop samba
> 4. Remove all samba log files.
> 5. Create unix user vs
> 6. Start samba
> 7. Log on domain member pot 2003 server as domain user vs
> 8. From pot try to open hog - it ask me password.
> 9. Stop samba and make archive of /var/log/samba.


I'm not entirely sure about the whole sequence, but have you tried
adding "passdb backend = smbpasswd" on the server which you upgraded
from 3.3.4 to 3.4?

The default value for passdb backend changed between 3.3 and 3.4 and I
noticed the following in log.pot you sent:

[2009/07/10 11:43:41,  5] passdb/pdb_tdb.c:557(tdbsam_getsampwnam)
  pdb_getsampwnam (TDB): error fetching database.
   Key: USER_vs
[2009/07/10 11:43:41,  3] smbd/sec_ctx.c:418(pop_sec_ctx)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/07/10 11:43:41,  3] auth/auth_sam.c:282(check_sam_security)
  check_sam_security: Couldn't find user 'vs' in passdb.
[2009/07/10 11:43:41,  5] auth/auth.c:274(check_ntlm_password)
  check_ntlm_password: sam authentication for user [vs] FAILED with error NT_STATUS_NO_SUCH_USER

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20090710/d2d4d674/attachment.pgp>