[Pkg-samba-maint] Bug#849146: Bug#849146: samba: empty client domain is not mapped to standalone server domain when user name contains @

[Mathieu Parent]

2016-12-23 0:22 GMT+01:00 Andrea Janna <andre60 at brazcubas.br>:
> Package: samba
> Version: 2:4.5.2+dfsg-1
> Severity: normal
> Tags: upstream patch

Hi,
> After upgrading from Samba 4.4.7 to 4.5.2 user authentication stopped working in our installation.
>
> We are mapping (via username map script) usernames from full email addresses to real Samba usernames so that users can login to Samba server using email address as username.
> Samba is configured as standalone server.
>
> Upstrean commit 3f82db56cbf2727abd465e28ac02ad2242b47c29 modified client domain mapping so that an empty domain is not mapped any more to Samba server domain if username contains "@".
> Since we have no domain at our site Windows clients send empty domain string to Samba when users attempt to log in.
> When user tries to login using full email address as username Samba doesn't map the empty domain to Samba server domain and authentication fails.
>
> As reported in upstream bug https://bugzilla.samba.org/show_bug.cgi?id=12375 preserving empty domain is useful only if there is a domain controller.
> I'd expect that when Samba configuration is "server role = standalone" empty client domain will always be mapped to server domain.
>
> I wrote a simple patch that fixes the problem allowing empty domain mapping if Samba role is standalone server.

Thanks for this report.

Can you forward this to upstream bugzilla (linked to
https://bugzilla.samba.org/show_bug.cgi?id=12375) and report back bug#
here?

Thanks

-- 
Mathieu