[Pkg-samba-maint] Bug#783658: Bug#783658: All authentication fails with NT_STATUS_NO_SUCH_USER if server's NetBIOS name is >15 chars

[Jelmer Vernooij]

On Tue, Apr 28, 2015 at 03:57:49PM -0400, Christopher David Howie wrote:
> Package: samba
> Version: 2:4.1.17+dfsg-2
> Tags: upstream, fixed-upstream
> 
> Samba 4.1.17 appears to have a bug causing all authentication attempts
> to fail (internal error NT_STATUS_NO_SUCH_USER) if the NetBIOS name of
> the server is over 15 characters long.  This includes the inferred name
> if "netbios name" is not set in the config file and the machine's
> hostname is over 15 characters long -- therefore the config may not even
> be "incorrect" but authentication still break.
> 
> This was reported upstream previously
> <https://bugzilla.samba.org/show_bug.cgi?id=11008> and is fixed in a
> newer Samba.  The fix may need to be backported.
> 
> A workaround is to set "netbios name" explicitly in smb.conf to a string
> of 15 or fewer characters.  After restarting Samba, authentication
> should work as before.

FWIW The problem here is that comparing a long hostname with the
NetBIOS name (which is limited to 15 characters) is broken. NetBIOS
names can't be longer than 15 characters, even with the upstream patch
- and samba will already truncate the netbios name if you set it to a
longer name in smb.conf. [1]

[1] http://www.ubiqx.org/cifs/NetBIOS.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20150428/022837a4/attachment.sig>