[Pkg-samba-maint] Bug#912193: Bug#912193: Bug#912193: samba: Ignores UNIX groups

[L.P.H. van Belle]

Hai Paul, 


> I had tried to build Samba 4.9.1 the "Debian way", following 
> the method
> in the "experimental" packages, but failed on my "stretch" machine due
> to some version incompatibility issues.

Post your problem/question on the samba list and we will analize this problem.
And if you want a samba 4.9.1 on stretch, you can use the build i make for the samba list users.
Of the my changes for a stretch build and build it yourself. 
Instructions can be found at http://apt.van-belle.nl 

And have you seen the list of changes between 4.5 and 4.9 its enormus. 
Smb.conf did also change a lot and without smb.conf there is nothing check if your setup is ok.
I really suggest you also have look at https://wiki.samba.org/index.php/User_Documentation 
For the upgrade from 4.5 to 4.9. 
So a summerized version of all smb.conf changes : https://downloads.van-belle.nl/samba4/Upgrade-info.txt 
As of 4.1 upto 4.9.

My first guess,, your idmap config setup is wrong. 
Or post you smb.conf here and i'll have a look, or post it to the samba list, it a very active list.


Best regards, 

Louis


> -----Oorspronkelijk bericht-----
> Van: Pkg-samba-maint 
> [mailto:pkg-samba-maint-bounces+belle=bazuin.nl at alioth-lists.d
> ebian.net] Namens Paul Szabo
> Verzonden: dinsdag 30 oktober 2018 0:24
> Aan: Mathieu Parent; 912193 at bugs.debian.org
> Onderwerp: [Pkg-samba-maint] Bug#912193: Bug#912193: samba: 
> Ignores UNIX groups
> 
> Dear Mathieu,
> 
> > Why your UNIX groups don't match your Windows groups? This 
> is usually the case, with nss_winbind.
> My site is mainly Linux; we have secondary groups in the /etc/group
> file. I am trying to move from Samba3 to the Debian Samba4, setting up
> Samba as an AD DC (for Windows10). I have the libnss-winbind package.
> Still, Samba (winbidd?) seems to create separate 
> "Domain\user" entities,
> and does seem to add those to the groups that the Linux user 
> belongs to.
> 
> > Alternatively, you can reverse the logic with idmap_nss.
> 
> I tried that, did not seem to help.
> 
> >> (Seems to me that Samba4.9 suffers from the same issue.)
> > Have you tried it? ...
> 
> I had tried to build Samba 4.9.1 the "Debian way", following 
> the method
> in the "experimental" packages, but failed on my "stretch" machine due
> to some version incompatibility issues. (Did not try the "native way"
> with configure/make, thought it would be best to follow Debian.)
It is, but you need more then the package on stretch. 

> 
> > ... This part of the code has changed a lot.
> 
> The file source3/auth/auth_util.c did not change that much between
> 4.5.12 and 4.9.1, the "essence" of my patch still seems to apply
> (though not the patch file I posted).
> 
> > Also please note that we don't accept patches that are not merged
> > upstream first.
> > Additionnaly, this patch target stable while it's not a security or
> > stability patch.
> 
> Understood. I have been using my own Samba for years, can keep doing
> that.
> 
> Cheers, Paul
> -- 
> Paul Szabo   psz at maths.usyd.edu.au   
> http://www.maths.usyd.edu.au/u/psz/
> School of Mathematics and Statistics   University of Sydney   
>  Australia
> _______________________________________________
> Pkg-samba-maint mailing list
> Pkg-samba-maint at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-s
> amba-maint
>